7.8
CWE
125
Advisory Published
Updated

CVE-2020-8672

First published: Tue Feb 02 2021(Updated: )

Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel BIOS
Intel Celeron 4205u
Intel Celeron 4305u
Intel Celeron 4305ue
Intel Core I3 8100
Intel Core I3 8100f
Intel Core I3 8100t
Intel Core I3 8300
Intel Core I3 8300t
Intel Core I3 8350k
Intel Core I3 9100
Intel Core I3 9100f
Intel Core I3 9100t
Intel Core I3 9300
Intel Core I3 9300t
Intel Core I3 9320
Intel Core I3 9350k
Intel Core I3 9350kf
Intel Core I5 8400
Intel Core I5 8400t
Intel Core I5 8500
Intel Core I5 8500t
Intel Core I5 8600
Intel Core I5 8600k
Intel Core I5 8600t
Intel Core I5 9400
Intel Core I5 9400f
Intel Core I5 9400t
Intel Core I5 9500
Intel Core I5 9500f
Intel Core I5 9500t
Intel Core I5 9600
Intel Core I5 9600k
Intel Core I5 9600kf
Intel Core I5 9600t
Intel Core I7 8086k
Intel Core I7 8700
Intel Core I7 8700k
Intel Core I7 8700t
Intel Core I7 9700
Intel Core I7 9700f
Intel Core I7 9700k
Intel Core I7 9700kf
Intel Core I7 9700t
Intel Core I9 9900
Intel Core I9 9900k
Intel Core I9 9900kf
Intel Core I9 9900ks
Intel Core I9 9900t

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2020-8672?

    CVE-2020-8672 is a vulnerability in the BIOS firmware for 8th and 9th Generation Intel(R) Core(TM) and Intel(R) Celeron(R) Processors, which may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.

  • Who is affected by CVE-2020-8672?

    The vulnerability affects Intel BIOS firmware for 8th and 9th Generation Intel(R) Core(TM) and Intel(R) Celeron(R) Processors.

  • What is the severity of CVE-2020-8672?

    The severity of CVE-2020-8672 is high, with a CVSS score of 7.8.

  • How can an unauthenticated user exploit CVE-2020-8672?

    An unauthenticated user can potentially exploit CVE-2020-8672 by gaining local access to the affected system.

  • Where can I find more information about CVE-2020-8672?

    You can find more information about CVE-2020-8672 in the advisory published by Intel: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203