CVE-2020-12359

Description

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CVSS breakdown

Affected products

• Intel / bios
• NetApp / aff_bios
• NetApp / cloud_backup
• NetApp / e-series_bios
• NetApp / fas_bios
• NetApp / hci_compute_node_bios
• NetApp / hci_storage_node_bios
• NetApp / solidfire_bios

References

• MISChttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html
• MISChttps://security.netapp.com/advisory/ntap-20210702-0002/