BaselineWatch
Desk

CVE-2020-8670

6.4 medium SSVC exploitation: none Modified

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Fix

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 6.4 · intel, siemens, netappNVD modified 2026-10-08 21:17

Affected (CPE criteria) 18

  • cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc527g_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc547g_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:aff_bios:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:fas_bios:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:hci_compute_node_bios:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:hci_storage_node_bios:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:solidfire_bios:-:*:*:*:*:*:*:*

References 6