CVE-2020-8704: Race Condition
Published Jun 9, 2021
·Updated
Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
25 affected components
Intel Local Manageability Service<2039.1.0.0
Siemens Simatic Field Pg M5 Firmware
Siemens Simatic Field Pg M5
Siemens Simatic Field Pg M6 Firmware
Siemens SIMATIC Field PG M6
Siemens Simatic Ipc427e Firmware
Siemens Simatic Ipc427e
Siemens Simatic Ipc477e Firmware
Siemens Simatic Ipc477e
Siemens Simatic Ipc477e Pro Firmware
Siemens Simatic Ipc477e Pro
Siemens Simatic Ipc527g Firmware
Siemens Simatic Ipc527g
Siemens Simatic Ipc547g Firmware
Siemens Simatic Ipc547g
Siemens Simatic Ipc627e Firmware<25.02.10
Siemens Simatic Ipc627e
Siemens Simatic Ipc647e Firmware<25.02.10
Siemens Simatic Ipc647e
Siemens Simatic Ipc677e Firmware<25.02.10
Siemens Simatic Ipc677e
Siemens Simatic Ipc847e Firmware<25.02.10
Siemens Simatic Ipc847e
Siemens Simatic Itp1000 Firmware
Siemens SIMATIC ITP1000
Event History
Jun 9, 2021
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-8704?
CVE-2020-8704 is a race condition vulnerability in the Intel(R) LMS software.
2
What is the severity of CVE-2020-8704?
The severity of CVE-2020-8704 is medium with a CVSS score of 6.4.
3
How does CVE-2020-8704 impact the affected software?
CVE-2020-8704 can potentially enable escalation of privilege via local access on systems running Intel(R) LMS versions before 2039.1.0.0.
4
Which software versions are affected by CVE-2020-8704?
Intel(R) LMS versions before 2039.1.0.0 are affected by CVE-2020-8704.
5
How can I fix CVE-2020-8704?
To fix CVE-2020-8704, update your Intel(R) LMS software to version 2039.1.0.0 or later.