CVE-2020-12359

Medium

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable…

intel·CWE-691·Published 2021-06-09

CVSS

6.8

EPSS

0.00

KEV

Exploits

cve.orgen

182 chars

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

NVDen

182 chars

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Una administración insuficiente del flujo de control en el firmware de algunos Intel® Processors puede permitir a un usuario no autenticado permitir potencialmente una escalada de privilegios por medio de un acceso físico

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	cve.org	6.8	—	—	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	6.8	—	—	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H