6.7
MEDIUM
CVE-2020-0587
Intel Processors BIOS Firmware Privilege Escalation
Description

Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

INFO

Published Date :

Nov. 12, 2020, 6:15 p.m.

Last Modified :

Nov. 21, 2024, 4:53 a.m.

Remotely Exploitable :

No

Impact Score :

5.9

Exploitability Score :

0.8
Affected Products

The following products are affected by CVE-2020-0587 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Intel bios
2 Intel xeon_silver_4214
3 Intel core_i5-7640x
4 Intel core_i7-3820
5 Intel core_i7-3920xm
6 Intel core_i7-3930k
7 Intel core_i7-3940xm
8 Intel core_i7-3960x
9 Intel core_i7-3970x
10 Intel core_i7-4820k
11 Intel core_i7-4930k
12 Intel core_i7-4930mx
13 Intel core_i7-4940mx
14 Intel core_i7-4960x
15 Intel core_i7-5820k
16 Intel core_i7-5930k
17 Intel core_i7-5960x
18 Intel core_i7-6800k
19 Intel core_i7-6850k
20 Intel core_i7-6900k
21 Intel core_i7-6950x
22 Intel core_i7-7740x
23 Intel core_i7-7800x
24 Intel core_i7-7820x
25 Intel core_i7-9800x
26 Intel core_i9-10900x
27 Intel core_i9-10920x
28 Intel core_i9-10940x
29 Intel core_i9-10980xe
30 Intel core_i9-7900x
31 Intel core_i9-7920x
32 Intel core_i9-7940x
33 Intel core_i9-7960x
34 Intel core_i9-7980xe
35 Intel core_i9-9820x
36 Intel core_i9-9900x
37 Intel core_i9-9920x
38 Intel core_i9-9940x
39 Intel core_i9-9960x
40 Intel core_i9-9980xe
41 Intel xeon_bronze_3204
42 Intel xeon_bronze_3206r
43 Intel xeon_gold_5215
44 Intel xeon_gold_5215l
45 Intel xeon_gold_5217
46 Intel xeon_gold_5218
47 Intel xeon_gold_5218b
48 Intel xeon_gold_5218n
49 Intel xeon_gold_5218r
50 Intel xeon_gold_5218t
51 Intel xeon_gold_5220
52 Intel xeon_gold_5220r
53 Intel xeon_gold_5220s
54 Intel xeon_gold_5220t
55 Intel xeon_gold_5222
56 Intel xeon_gold_6208u
57 Intel xeon_gold_6209u
58 Intel xeon_gold_6210u
59 Intel xeon_gold_6212u
60 Intel xeon_gold_6222v
61 Intel xeon_gold_6226
62 Intel xeon_gold_6226r
63 Intel xeon_gold_6230
64 Intel xeon_gold_6230n
65 Intel xeon_gold_6230r
66 Intel xeon_gold_6230t
67 Intel xeon_gold_6234
68 Intel xeon_gold_6238
69 Intel xeon_gold_6238l
70 Intel xeon_gold_6238r
71 Intel xeon_gold_6238t
72 Intel xeon_gold_6240
73 Intel xeon_gold_6240l
74 Intel xeon_gold_6240r
75 Intel xeon_gold_6240y
76 Intel xeon_gold_6242
77 Intel xeon_gold_6242r
78 Intel xeon_gold_6244
79 Intel xeon_gold_6246
80 Intel xeon_gold_6246r
81 Intel xeon_gold_6248
82 Intel xeon_gold_6248r
83 Intel xeon_gold_6250
84 Intel xeon_gold_6250l
85 Intel xeon_gold_6252
86 Intel xeon_gold_6252n
87 Intel xeon_gold_6254
88 Intel xeon_gold_6256
89 Intel xeon_gold_6258r
90 Intel xeon_gold_6262v
91 Intel xeon_platinum_8253
92 Intel xeon_platinum_8256
93 Intel xeon_platinum_8260l
94 Intel xeon_platinum_8260y
95 Intel xeon_platinum_8268
96 Intel xeon_platinum_8270
97 Intel xeon_platinum_8276
98 Intel xeon_platinum_8276l
99 Intel xeon_platinum_8280
100 Intel xeon_platinum_8280l
101 Intel xeon_platinum_9221
102 Intel xeon_platinum_9222
103 Intel xeon_platinum_9242
104 Intel xeon_platinum_9282
105 Intel xeon_silver_4208
106 Intel xeon_silver_4209t
107 Intel xeon_silver_4210
108 Intel xeon_silver_4210r
109 Intel xeon_silver_4210t
110 Intel xeon_silver_4214r
111 Intel xeon_silver_4214y
112 Intel xeon_silver_4215
113 Intel xeon_silver_4215r
114 Intel xeon_silver_4216
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-0587.

URL Resource
https://security.netapp.com/advisory/ntap-20201113-0001/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 Vendor Advisory
https://security.netapp.com/advisory/ntap-20201113-0001/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-0587 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-0587 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20201113-0001/
    Added Reference https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Nov. 19, 2020

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://security.netapp.com/advisory/ntap-20201113-0001/ No Types Assigned https://security.netapp.com/advisory/ntap-20201113-0001/ Third Party Advisory
    Changed Reference Type https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 No Types Assigned https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 Vendor Advisory
    Added CWE NIST CWE-754
    Added CPE Configuration AND OR *cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_bronze_3204:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_bronze_3206r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5215:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5215l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5217:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218b:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218n:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220s:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5222:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6208u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6209u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6210u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6212u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6222v:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6226:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6226r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230n:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6234:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6242:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6242r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6244:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6246:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6246r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6248:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6248r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6250:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6250l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6252:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6252n:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6254:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6256:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6258r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6262v:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8253:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8256:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8260l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8260y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8268:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8270:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8276:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8276l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8280:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8280l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9221:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9222:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9242:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9282:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4208:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4209t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4210:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4210r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4210t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4214:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4214r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4214y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4215:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4215r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4216:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:core_i5-7640x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-3820:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-3920xm:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-3930k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-3940xm:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-3960x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-3970x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-4820k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-4930k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-4930mx:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-4940mx:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-4960x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-5820k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-5930k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-5960x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-6800k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-6850k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-6900k:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-6950x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-7740x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-7800x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-7820x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i7-9800x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-10900x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-10920x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-10940x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-10980xe:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-7900x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-7920x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-7940x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-7960x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-7980xe:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-9820x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-9900x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-9920x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-9940x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-9960x:-:*:*:*:*:*:*:* cpe:2.3:h:intel:core_i9-9980xe:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Nov. 13, 2020

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20201113-0001/ [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-0587 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-0587 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.10264

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability