CVE-2020-8745

Published: Nov 12, 2020Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Affected (28)

Intel

2 products

Converged Security And Manageability Engine

Trusted Execution Technology

Siemens

20 products

Simatic Drive Controller Firmware

Simatic Et200sp 1515sp Pc2 Firmware

Simatic Field Pg M5 Firmware

Simatic Field Pg M6 Firmware

Simatic Ipc127e Firmware

Simatic Ipc427e Firmware

Simatic Ipc477e Firmware

Simatic Ipc527g Firmware

Simatic Ipc547g Firmware

Simatic Ipc627e Firmware

Simatic Ipc647e Firmware

Simatic Ipc667e Firmware

Simatic Ipc847e Firmware

Simatic Itp1000 Firmware

Sinumerik 828d Hw Pu.4 Firmware

Sinumerik Mc Mcu 1720 Firmware

Sinumerik One Firmware

Sinumerik 840d Sl Ht 10 Firmware

Sinumerik One Ncu 1740 Firmware

Sinumerik One Ppu 1740 Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Intel Converged Security And Manageability Engine	Before 11.8.80
Intel Converged Security And Manageability Engine	From 11.12.0 to 11.12.80
Intel Converged Security And Manageability Engine	From 11.22.0 to 11.22.80
Intel Converged Security And Manageability Engine	From 12.0 to 12.0.70
Intel Converged Security And Manageability Engine	From 14.0 to 14.0.45
Intel Converged Security And Manageability Engine	From 14.5.0 to 14.5.25

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Intel Trusted Execution Technology	Before 3.1.80
Intel Trusted Execution Technology	From 4.0 to 4.0.30

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Drive Controller Firmware	Before 05.00.01.00

Running on/with	Platform Versions
Siemens Simatic Drive Controller	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Et200sp 1515sp Pc2 Firmware	Before 0209.0105

Running on/with	Platform Versions
Siemens Simatic Et200sp 1515sp Pc2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M5 Firmware	Before 22.01.08

Running on/with	Platform Versions
Siemens Simatic Field Pg M5	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M6 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc127e Firmware	Before 27.01.05

Running on/with	Platform Versions
Siemens Simatic Ipc127e	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc427e Firmware	Before 27.01.05

Running on/with	Platform Versions
Siemens Simatic Ipc427e	All versions

Configuration I

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc477e Firmware	Before 21.01.15

Running on/with	Platform Versions
Siemens Simatic Ipc477e	All versions
Siemens Simatic Ipc477e Pro	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc527g Firmware	Before 1.4.0

Running on/with	Platform Versions
Siemens Simatic Ipc527g	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc547g Firmware	Before r1.30.0

Running on/with	Platform Versions
Siemens Simatic Ipc547g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc627e Firmware	Before 25.02.08

Running on/with	Platform Versions
Siemens Simatic Ipc627e	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc647e Firmware	Before 25.02.08

Running on/with	Platform Versions
Siemens Simatic Ipc647e	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc667e Firmware	Before 25.02.08

Running on/with	Platform Versions
Siemens Simatic Ipc667e	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc847e Firmware	Before 25.02.08

Running on/with	Platform Versions
Siemens Simatic Ipc847e	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itp1000 Firmware	Before 23.01.08

Running on/with	Platform Versions
Siemens Simatic Itp1000	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinumerik 828d Hw Pu.4 Firmware	Before 08.00.00.00

Running on/with	Platform Versions
Siemens Sinumerik 828d Hw Pu.4	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinumerik Mc Mcu 1720 Firmware	Before 05.00.00.00

Running on/with	Platform Versions
Siemens Sinumerik Mc Mcu 1720	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinumerik One Firmware	All versions

Running on/with	Platform Versions
Siemens Sinumerik One	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinumerik 840d Sl Ht 10 Firmware	All versions

Running on/with	Platform Versions
Siemens Sinumerik 840d Sl Ht 10	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinumerik One Ncu 1740 Firmware	Before 04.00.00.00

Running on/with	Platform Versions
Siemens Sinumerik One Ncu 1740	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Sinumerik One Ppu 1740 Firmware	Before 06.00.00.00

Running on/with	Platform Versions
Siemens Sinumerik One Ppu 1740	All versions

References (8)

https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf

Source: secure@intel.com

PatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20201113-0002/

Source: secure@intel.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20201113-0005/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

Source: secure@intel.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20201113-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20201113-0005/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.