CVE-2020-12360

Description

Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS breakdown

Affected products

• Intel / bios
• NetApp / aff_bios
• NetApp / cloud_backup
• NetApp / e-series_bios
• NetApp / fas_bios
• NetApp / hci_compute_node_bios
• NetApp / hci_storage_node_bios
• NetApp / solidfire_bios
• Siemens / simatic_cpu_1518-4_firmware
• Siemens / simatic_cpu_1518f-4_firmware
• Siemens / simatic_ipc547g_firmware

References

• MISChttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00463.html
• MISChttps://security.netapp.com/advisory/ntap-20210702-0002/
• MISChttps://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf