CVE-2020-8745
MEDIUM
6.8
CVSS Score
Published: November 12, 2020 at 06:06 PM UTC
Updated: June 17, 2026 at 03:26 AM UTC
43 products affected across 2 vendorsConverged Security Management EngineSIMATIC IPC477E FirmwareSIMATIC ITP1000 Firmware
Using Intel(R) CSME, Intel(R) TXE by N/A?
Get instant alerts when new vulnerabilities affect Intel(R) CSME, Intel(R) TXE - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.8
Exploit prediction
EPSS 0.4%
Description
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 11.8.8011.12.0 ≤ v < 11.12.8011.22.0 ≤ v < 11.22.8012.0 ≤ v < 12.0.7014.0 ≤ v < 14.0.4514.5.0 ≤ v < 14.5.25
Affected range stops below 11.12.80, so it looks safe — our inference, not a vendor statement
Affected range stops below 11.22.80, so it looks safe — our inference, not a vendor statement
Affected range stops below 11.8.80, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.0.70, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.45, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.5.25, so it looks safe — our inference, not a vendor statement
v < 3.1.804.0 ≤ v < 4.0.30
Affected range stops below 3.1.80, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.0.30, so it looks safe — our inference, not a vendor statement
v < 05.00.01.00
Affected range stops below 05.00.01.00, so it looks safe — our inference, not a vendor statement
siemens-simatic-drive-controller (same device)
v < 0209.0105
Affected range stops below 0209.0105, so it looks safe — our inference, not a vendor statement
siemens-simatic-et200sp-1515sp-pc2 (same device)
v < 22.01.08
Affected range stops below 22.01.08, so it looks safe — our inference, not a vendor statement
siemens-simatic-field-pg-m5 (same device)
v < 27.01.05
Affected range stops below 27.01.05, so it looks safe — our inference, not a vendor statement
siemens-simatic-ipc127e (same device)
v < 27.01.05
Affected range stops below 27.01.05, so it looks safe — our inference, not a vendor statement
siemens-simatic-ipc427e (same device)
v < 21.01.15
Affected range stops below 21.01.15, so it looks safe — our inference, not a vendor statement
siemens-simatic-ipc477e (same device) · siemens-simatic-ipc477e-pro (same device)
v < 1.4.0
Affected range stops below 1.4.0, so it looks safe — our inference, not a vendor statement
siemens-simatic-ipc527g (same device)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
x_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdfx_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://security.netapp.com/advisory/ntap-20201113-0002/x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://security.netapp.com/advisory/ntap-20201113-0005/x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391CVSS
- Attack Vector
- PHYSICAL
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card