CVE-2020-8744

HIGH

7.8

CVSS Score

Published: November 12, 2020 at 06:06 PM UTC

Updated: June 17, 2026 at 03:26 AM UTC

10 products affected across 2 vendorsServer Platform ServicesTrusted Execution EngineSIMATIC S7-1500 Firmware

Using Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS by N/A?

Get instant alerts when new vulnerabilities affect Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.4%

Description

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Converged Security and Management Engine · Intel

95%

v < 12.0.7013.0.0 ≤ v < 13.0.4013.30.0 ≤ v < 13.30.1014.0.0 ≤ v < 14.0.4514.5.0 ≤ v < 14.5.25

Affected range stops below 12.0.70, so it looks safe — our inference, not a vendor statement

Affected range stops below 13.0.40, so it looks safe — our inference, not a vendor statement

Affected range stops below 13.30.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 14.0.45, so it looks safe — our inference, not a vendor statement

Affected range stops below 14.5.25, so it looks safe — our inference, not a vendor statement

Server Platform Services · Intel

95%

v < 12.0.70v < e3_05.01.04.200

Affected range stops below 12.0.70, so it looks safe — our inference, not a vendor statement

Affected range stops below e3_05.01.04.200, so it looks safe — our inference, not a vendor statement

Trusted Execution Engine · Intel

95%

v < 12.0.70v < 4.0.30

Affected range stops below 12.0.70, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.0.30, so it looks safe — our inference, not a vendor statement

SIMATIC S7-1500 Firmware · Siemens

95%

All versions

siemens-simatic-s7-1500 (same device)

SIMATIC S7-1518-4 Pn /dp MFP Firmware · Siemens

95%

All versions

siemens-simatic-s7-1518-4-pn-dp-mfp (same device)

SIMATIC S7-1518f 4 Pn /dp MFP Firmware · Siemens

95%

All versions

siemens-simatic-s7-1518f-4-pn-dp-mfp (same device)

Converged Security Management Engine · Intel

60%

v < 12.0.70

Affected range stops below 12.0.70, so it looks safe — our inference, not a vendor statement

SIMATIC S7-1500 · Siemensdevice

80%

All versions

Simatic S7-1518-4 Pn/Dp Mfp · Siemensdevice

80%

All versions

Simatic S7-1518F-4 Pn/Dp Mfp · Siemensdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (5)

x_refsource_CONFIRMPatchThird Party Advisory

Source: [email protected]

https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://security.netapp.com/advisory/ntap-20201113-0002/

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://security.netapp.com/advisory/ntap-20201113-0004/

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://security.netapp.com/advisory/ntap-20201113-0005/

x_refsource_MISCVendor Advisory

Source: [email protected]

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

CVSS

7.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-665

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card