CVE-2020-8755: Race Condition
Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8755?
CVE-2020-8755 has been classified with a severity that may allow escalation of privilege if exploited.
How do I fix CVE-2020-8755?
To fix CVE-2020-8755, update to Intel Converged Security and Management Engine versions 12.0.70 or 14.0.45, and Intel Server Platform Services versions E5_04.01.04.400 and E3_05.01.04.200 or later.
Who is affected by CVE-2020-8755?
CVE-2020-8755 affects systems using Intel CSME versions before 12.0.70 and 14.0.45, as well as Intel SPS versions before E5_04.01.04.400 and E3_05.01.04.200.
What type of vulnerability is CVE-2020-8755?
CVE-2020-8755 is a race condition vulnerability that can lead to elevation of privileges.
Can CVE-2020-8755 be exploited remotely?
CVE-2020-8755 requires physical access for exploitation, making it less likely to be exploited remotely.