CVE-2020-8704

Published: Jun 9, 2021Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.5 / Impact: 5.9

Source: NVD

Description

Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (13)

Products: Intel: Local Manageability Service · Siemens: Simatic Field Pg M5 Firmware, Simatic Field Pg M6 Firmware, Simatic Ipc427e Firmware, Simatic Ipc477e Firmware, Simatic Ipc477e Pro Firmware, Simatic Ipc527g Firmware, Simatic Ipc547g Firmware, Simatic Ipc627e Firmware, Simatic Ipc647e Firmware, Simatic Ipc677e Firmware, Simatic Ipc847e Firmware, Simatic Itp1000 Firmware

Intel

1 product

Local Manageability Service

Siemens

12 products

Simatic Field Pg M5 Firmware

Simatic Field Pg M6 Firmware

Simatic Ipc427e Firmware

Simatic Ipc477e Firmware

Simatic Ipc477e Pro Firmware

Simatic Ipc527g Firmware

Simatic Ipc547g Firmware

Simatic Ipc627e Firmware

Simatic Ipc647e Firmware

Simatic Ipc677e Firmware

Simatic Ipc847e Firmware

Simatic Itp1000 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Intel Local Manageability Service	Before 2039.1.0.0

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M5 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M6 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M6	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc427e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc427e	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc477e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc477e	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc477e Pro Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc477e Pro	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc527g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc527g	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc547g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc547g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc627e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc627e	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc647e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc647e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc677e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc677e	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc847e Firmware	Before 25.02.10

Running on/with	Platform Versions
Siemens Simatic Ipc847e	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itp1000 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Itp1000	All versions

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (4)

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: secure@intel.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00459.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.