6.7
MEDIUM
CVE-2020-0588
Intel Processor BIOS Privilege Escalation Vulnerability
Description

Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

INFO

Published Date :

Nov. 12, 2020, 6:15 p.m.

Last Modified :

Nov. 21, 2024, 4:53 a.m.

Remotely Exploitable :

No

Impact Score :

5.9

Exploitability Score :

0.8
Affected Products

The following products are affected by CVE-2020-0588 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Intel bios
2 Intel xeon_silver_4214
3 Intel xeon_bronze_3204
4 Intel xeon_bronze_3206r
5 Intel xeon_gold_5215
6 Intel xeon_gold_5215l
7 Intel xeon_gold_5217
8 Intel xeon_gold_5218
9 Intel xeon_gold_5218b
10 Intel xeon_gold_5218n
11 Intel xeon_gold_5218r
12 Intel xeon_gold_5218t
13 Intel xeon_gold_5220
14 Intel xeon_gold_5220r
15 Intel xeon_gold_5220s
16 Intel xeon_gold_5220t
17 Intel xeon_gold_5222
18 Intel xeon_gold_6208u
19 Intel xeon_gold_6209u
20 Intel xeon_gold_6210u
21 Intel xeon_gold_6212u
22 Intel xeon_gold_6222v
23 Intel xeon_gold_6226
24 Intel xeon_gold_6226r
25 Intel xeon_gold_6230
26 Intel xeon_gold_6230n
27 Intel xeon_gold_6230r
28 Intel xeon_gold_6230t
29 Intel xeon_gold_6234
30 Intel xeon_gold_6238
31 Intel xeon_gold_6238l
32 Intel xeon_gold_6238r
33 Intel xeon_gold_6238t
34 Intel xeon_gold_6240
35 Intel xeon_gold_6240l
36 Intel xeon_gold_6240r
37 Intel xeon_gold_6240y
38 Intel xeon_gold_6242
39 Intel xeon_gold_6242r
40 Intel xeon_gold_6244
41 Intel xeon_gold_6246
42 Intel xeon_gold_6246r
43 Intel xeon_gold_6248
44 Intel xeon_gold_6248r
45 Intel xeon_gold_6250
46 Intel xeon_gold_6250l
47 Intel xeon_gold_6252
48 Intel xeon_gold_6252n
49 Intel xeon_gold_6254
50 Intel xeon_gold_6256
51 Intel xeon_gold_6258r
52 Intel xeon_gold_6262v
53 Intel xeon_platinum_8253
54 Intel xeon_platinum_8256
55 Intel xeon_platinum_8260l
56 Intel xeon_platinum_8260y
57 Intel xeon_platinum_8268
58 Intel xeon_platinum_8270
59 Intel xeon_platinum_8276
60 Intel xeon_platinum_8276l
61 Intel xeon_platinum_8280
62 Intel xeon_platinum_8280l
63 Intel xeon_platinum_9221
64 Intel xeon_platinum_9222
65 Intel xeon_platinum_9242
66 Intel xeon_platinum_9282
67 Intel xeon_silver_4208
68 Intel xeon_silver_4209t
69 Intel xeon_silver_4210
70 Intel xeon_silver_4210r
71 Intel xeon_silver_4210t
72 Intel xeon_silver_4214r
73 Intel xeon_silver_4214y
74 Intel xeon_silver_4215
75 Intel xeon_silver_4215r
76 Intel xeon_silver_4216
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-0588.

URL Resource
https://security.netapp.com/advisory/ntap-20201113-0001/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 Vendor Advisory
https://security.netapp.com/advisory/ntap-20201113-0001/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-0588 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-0588 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20201113-0001/
    Added Reference https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Nov. 19, 2020

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://security.netapp.com/advisory/ntap-20201113-0001/ No Types Assigned https://security.netapp.com/advisory/ntap-20201113-0001/ Third Party Advisory
    Changed Reference Type https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 No Types Assigned https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358 Vendor Advisory
    Added CWE NIST CWE-754
    Added CPE Configuration AND OR *cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_bronze_3204:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_bronze_3206r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5215:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5215l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5217:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218b:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218n:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5218t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220s:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5220t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_5222:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6208u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6209u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6210u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6212u:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6222v:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6226:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6226r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230n:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6230t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6234:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6238t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6240y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6242:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6242r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6244:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6246:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6246r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6248:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6248r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6250:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6250l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6252:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6252n:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6254:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6256:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6258r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_gold_6262v:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8253:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8256:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8260l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8260y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8268:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8270:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8276:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8276l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8280:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_8280l:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9221:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9222:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9242:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_platinum_9282:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4208:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4209t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4210:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4210r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4210t:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4214:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4214r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4214y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4215:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4215r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:xeon_silver_4216:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Nov. 13, 2020

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20201113-0001/ [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-0588 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-0588 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.10264

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability