CVE-2020-8703: Buffer Overflow

Q: What is the severity of CVE-2020-8703?

CVE-2020-8703 has a high severity score due to its potential to allow escalation of privileges for a privileged user through local access.

Q: How do I fix CVE-2020-8703?

To fix CVE-2020-8703, update the affected Intel Converged Security and Manageability Engine to versions 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, or 15.0.22.

Q: What systems are affected by CVE-2020-8703?

CVE-2020-8703 affects various versions of the Intel Converged Security and Manageability Engine and may impact systems running specific models of Intel hardware.

Q: Is it safe to use software affected by CVE-2020-8703 without a fix?

Using unpatched software affected by CVE-2020-8703 poses a security risk due to the potential for privilege escalation.

Q: Can CVE-2020-8703 be exploited remotely?

CVE-2020-8703 is not known to be exploitable remotely, but requires local access to exploit the vulnerability.

Published Jun 9, 2021

Updated

Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected Software

376 affected components

Intel Converged Security And Manageability Engine<12.0.81

Intel B360

Intel B365

Intel C242

Intel C246

Intel Celeron 4205u

Intel Celeron 4305u

Intel Celeron 4305ue

Intel Core I3-8100

Intel Core I3-8100b

Intel Core I3-8100h

Intel Core I3-8100t

Intel Core I3-8109u

Intel Core I3-8121u

Intel Core I3-8130u

Intel Core I3-8140u

Intel Core I3-8145u

Intel Core I3-8145ue

Intel Core I3-8300

Intel Core I3-8300t

Intel Core I3-8350k

Intel Core I5-8200y

Intel Core I5-8210y

Intel Core I5-8250u

Intel Core I5-8257u

Intel Core I5-8259u

Intel Core I5-8260u

Intel Core I5-8265u

Intel Core I5-8269u

Intel Core I5-8279u

Intel Core I5-8300h

Intel Core I5-8305g

Intel Core I5-8310y

Intel Core I5-8350u

Intel Core I5-8365u

Intel Core I5-8365ue

Intel Core I5-8400

Intel Core I5-8400b

Intel Core I5-8400h

Intel Core I5-8400t

Intel Core I5-8500

Intel Core I5-8500b

Intel Core I5-8500t

Intel Core I5-8600

Intel Core I5-8600k

Intel Core I5-8600t

Intel Core I7-8086k

Intel Core I7-8500y

Intel Core I7-8550u

Intel Core I7-8557u

Intel Core I7-8559u

Intel Core I7-8565u

Intel Core I7-8569u

Intel Core I7-8650u

Intel Core I7-8665u

Intel Core I7-8665ue

Intel Core I7-8700

Intel Core I7-8700b

Intel Core I7-8700k

Intel Core I7-8700t

Intel Core I7-8705g

Intel Core I7-8706g

Intel Core I7-8709g

Intel Core I7-8750h

Intel Core I7-8809g

Intel Core I7-8850h

Intel Core I9-8950hk

Intel H310

Intel H370

Intel Mobile Cm246

Intel Pentium Gold 4410y

Intel Pentium Gold 4415u

Intel Pentium Gold 4415y

Intel Pentium Gold 4417u

Intel Pentium Gold 4425y

Intel Pentium Gold 5405u

Intel Pentium Gold 6405u

Intel Pentium Gold 6500y

Intel Pentium Gold 7505

Intel Pentium Gold G5400

Intel Pentium Gold G5400t

Intel Pentium Gold G5420

Intel Pentium Gold G5420t

Intel Pentium Gold G5500

Intel Pentium Gold G5500t

Intel Pentium Gold G5600

Intel Pentium Gold G5600t

Intel Pentium Gold G5620

Intel Pentium Gold G6400

Intel Pentium Gold G6400e

Intel Pentium Gold G6400t

Intel Pentium Gold G6400te

Intel Pentium Gold G6405

Intel Pentium Gold G6405t

Intel Pentium Gold G6500

Intel Pentium Gold G6500t

Intel Pentium Gold G6505

Intel Pentium Gold G6505t

Intel Pentium Gold G6600

Intel Pentium Gold G6605

Intel Q370

Intel Xeon W-10855m

Intel Xeon W-10885m

Intel Xeon W-11855m

Intel Xeon W-11955m

Intel Xeon W-1250

Intel Xeon W-1250e

Intel Xeon W-1250p

Intel Xeon W-1250te

Intel Xeon W-1270

Intel Xeon W-1270e

Intel Xeon W-1270p

Intel Xeon W-1270te

Intel Xeon W-1290

Intel Xeon W-1290e

Intel Xeon W-1290p

Intel Xeon W-1290t

Intel Xeon W-1290te

Intel Z370

Intel Z390

Intel Converged Security And Manageability Engine<13.0.47

Intel Core I3-1000g1

Intel Core I3-1000g4

Intel Core I3-1000ng4

Intel Core I3-1005g1

Intel Core I3-10100

Intel Core I3-10100e

Intel Core I3-10100f

Intel Core I3-10100t

Intel Core I3-10100te

Intel Core I3-10100y

Intel Core I3-10105

Intel Core I3-10105f

Intel Core I3-10105t

Intel Core I3-10110u

Intel Core I3-10110y

Intel Core I3-10300

Intel Core I3-10300t

Intel Core I3-10305

Intel Core I3-10305t

Intel Core I3-10320

Intel Core I3-10325

Intel Core I5-10200h

Intel Core I5-10210u

Intel Core I5-10210y

Intel Core I5-10300h

Intel Core I5-1030g4

Intel Core I5-1030g7

Intel Core I5-1030ng7

Intel Core I5-10310u

Intel Core I5-10310y

Intel Core I5-1035g1

Intel Core I5-1035g4

Intel Core I5-1035g7

Intel Core I5-1038ng7

Intel Core I5-10400

Intel Core I5-10400f

Intel Core I5-10400h

Intel Core I5-10400t

Intel Core I5-10500

Intel Core I5-10500e

Intel Core I5-10500h

Intel Core I5-10500t

Intel Core I5-10500te

Intel Core I5-10505

Intel Core I5-10600

Intel Core I5-10600k

Intel Core I5-10600kf

Intel Core I5-10600t

Intel Core I7-10510u

Intel Core I7-10510y

Intel Core I7-1060g7

Intel Core I7-1060ng7

Intel Core I7-10610u

Intel Core I7-1065g7

Intel Core I7-1068ng7

Intel Core I7-10700

Intel Core I7-10700e

Intel Core I7-10700f

Intel Core I7-10700k

Intel Core I7-10700kf

Intel Core I7-10700t

Intel Core I7-10700te

Intel Core I7-10710u

Intel Core I7-10750h

Intel Core I7-10810u

Intel Core I7-10850h

Intel Core I7-10870h

Intel Core I7-10875h

Intel Core I9-10850k

Intel Core I9-10885h

Intel Core I9-10900

Intel Core I9-10900e

Intel Core I9-10900f

Intel Core I9-10900k

Intel Core I9-10900kf

Intel Core I9-10900t

Intel Core I9-10900te

Intel Core I9-10910

Intel Core I9-10980hk

Intel Converged Security And Manageability Engine<13.30.17

Intel Core I3 L13g4

Intel Core I5 L16g7

Intel Converged Security And Manageability Engine<14.1.53

Intel B460

Intel H410

Intel H420e

Intel H470

Intel Q470

Intel Q470e

Intel W480

Intel W480e

Intel Z490

Intel Converged Security And Manageability Engine<14.5.32

Intel Converged Security And Manageability Engine<11.8.86

Intel B150

Intel B250

Intel Core I3-7020u

Intel Core I3-7100

Intel Core I3-7100e

Intel Core I3-7100h

Intel Core I3-7100t

Intel Core I3-7100u

Intel Core I3-7101e

Intel Core I3-7101te

Intel Core I3-7102e

Intel Core I3-7130u

Intel Core I3-7167u

Intel Core I3-7300

Intel Core I3-7300t

Intel Core I3-7320

Intel Core I3-7350k

Intel Core I5-7200u

Intel Core I5-7260u

Intel Core I5-7267u

Intel Core I5-7287u

Intel Core I5-7300hq

Intel Core I5-7300u

Intel Core I5-7360u

Intel Core I5-7400

Intel Core I5-7400t

Intel Core I5-7440eq

Intel Core I5-7440hq

Intel Core I5-7442eq

Intel Core I5-7500

Intel Core I5-7500t

Intel Core I5-7600

Intel Core I5-7600k

Intel Core I5-7600t

Intel Core I5-7y54

Intel Core I5-7y57

Intel Core I7-7500u

Intel Core I7-7560u

Intel Core I7-7567u

Intel Core I7-7600u

Intel Core I7-7660u

Intel Core I7-7700

Intel Core I7-7700hq

Intel Core I7-7700k

Intel Core I7-7700t

Intel Core I7-7820eq

Intel Core I7-7820hk

Intel Core I7-7820hq

Intel Core I7-7920hq

Intel Core I7-7y75

Intel Core M3-7y30

Intel Core M3-7y32

Intel Core M3-8100y

Intel H110

Intel H170

Intel H270

Intel Q150

Intel Q170

Intel Q250

Intel Q270

Intel X299

Intel Z170

Intel Z270

Intel Converged Security And Manageability Engine<11.12.86

Intel C420

Intel Converged Security And Manageability Engine<11.22.86

Intel C621

Intel C621a

Intel C622

Intel C624

Intel C625

Intel C626

Intel C627

Intel C627a

Intel C628

Intel C629

Intel C629a

Intel Converged Security And Manageability Engine<15.0.22

Intel Celeron 6305

Intel Celeron 6305e

Intel Core I3-11100b

Intel Core I3-1110g4

Intel Core I3-1115g4

Intel Core I3-1115g4e

Intel Core I3-1115gre

Intel Core I3-1120g4

Intel Core I3-1125g4

Intel Core I5-11260h

Intel Core I5-11300h

Intel Core I5-1130g7

Intel Core I5-11320h

Intel Core I5-1135g7

Intel Core I5-11400

Intel Core I5-11400f

Intel Core I5-11400h

Intel Core I5-11400t

Intel Core I5-1140g7

Intel Core I5-1145g7

Intel Core I5-1145g7e

Intel Core I5-1145gre

Intel Core I5-11500

Intel Core I5-11500b

Intel Core I5-11500h

Intel Core I5-11500t

Intel Core I5-1155g7

Intel Core I5-11600

Intel Core I5-11600k

Intel Core I5-11600kf

Intel Core I5-11600t

Intel Core I7-11370h

Intel Core I7-11375h

Intel Core I7-11390h

Intel Core I7-1160g7

Intel Core I7-1165g7

Intel Core I7-11700

Intel Core I7-11700b

Intel Core I7-11700f

Intel Core I7-11700k

Intel Core I7-11700kf

Intel Core I7-11700t

Intel Core I7-11800h

Intel Core I7-1180g7

Intel Core I7-11850h

Intel Core I7-1185g7

Intel Core I7-1185g7e

Intel Core I7-1185gre

Intel Core I7-1195g7

Intel Core I9-11900

Intel Core I9-11900f

Intel Core I9-11900h

Intel Core I9-11900k

Intel Core I9-11900kb

Intel Core I9-11900kf

Intel Core I9-11900t

Intel Core I9-11950h

Intel Core I9-11980hk

NetApp Cloud Backup

Siemens Simatic Field Pg M6 Firmware

Siemens SIMATIC Field PG M6

Siemens Simatic Field Pg M5 Firmware

Siemens Simatic Field Pg M5

Siemens Simatic Ipc427e Firmware

Siemens Simatic Ipc427e

Siemens Simatic Ipc477e Firmware

Siemens Simatic Ipc477e

Siemens Simatic Ipc477e Pro Firmware

Siemens Simatic Ipc477e Pro

Siemens Simatic Ipc527g Firmware

Siemens Simatic Ipc527g

Siemens Simatic Ipc547g Firmware

Siemens Simatic Ipc547g

Siemens Simatic Ipc627e Firmware<25.02.10

Siemens Simatic Ipc627e

Siemens Simatic Ipc647e Firmware<25.02.10

Siemens Simatic Ipc647e

Siemens Simatic Ipc677e Firmware<25.02.10

Siemens Simatic Ipc677e

Siemens Simatic Ipc847e Firmware<25.02.10

Siemens Simatic Ipc847e

Siemens Simatic Itp1000 Firmware

Siemens SIMATIC ITP1000

Event History

Jun 9, 2021

CVE Published

via MITRE·06:48 PM

Data Sourced

via MITRE·06:48 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-8703?

CVE-2020-8703 has a high severity score due to its potential to allow escalation of privileges for a privileged user through local access.

How do I fix CVE-2020-8703?

To fix CVE-2020-8703, update the affected Intel Converged Security and Manageability Engine to versions 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, or 15.0.22.

What systems are affected by CVE-2020-8703?

CVE-2020-8703 affects various versions of the Intel Converged Security and Manageability Engine and may impact systems running specific models of Intel hardware.

Is it safe to use software affected by CVE-2020-8703 without a fix?

Using unpatched software affected by CVE-2020-8703 poses a security risk due to the potential for privilege escalation.

Can CVE-2020-8703 be exploited remotely?