CVE-2020-8744
mediumPriorität · verfolgen · 31EPSS 0.004 · 30. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)siemens_psirt
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPsiemens_psirt
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)cisa_csaf_ot
Avoid to run untrusted code on affected systems
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPcisa_csaf_ot
Avoid to run untrusted code on affected systems
- Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)siemens_psirt
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPsiemens_psirt
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)cisa_csaf_ot
Currently no remediation is planned
- Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPcisa_csaf_ot
Currently no remediation is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.6–7.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (25)
Betroffene Produkte und Versionsbereiche.
- n/a Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS≤ Intel(R) CSME versions before 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200enisa_euvdEU
- intel converged security and management engine< 12.0.70nvdUScpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*
- intel converged security and management engine13.0.0 → 13.0.40nvdUScpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*
- intel converged security and management engine13.30.0 → 13.30.10nvdUScpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*
- intel converged security and management engine14.0.0 → 14.0.45nvdUScpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*
- intel converged security and management engine14.5.0 → 14.5.25nvdUScpe:2.3:a:intel:converged_security_and_management_engine:*:*:*:*:*:*:*:*
- intel server platform services< e3_05.01.04.200nvdUScpe:2.3:a:intel:server_platform_services:*:*:*:*:*:*:*:*
- siemens simatic s7-1500 firmwarealle VersionennvdUScpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-501073SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020)2021-05-11csaf · siemens_psirtDE
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744 - “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591. Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.
- ICSA-21-131-15Siemens SIMATIC S7-15002021-05-11icsa · cisa_csaf_otUS
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744 - “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591. Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (22)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-8744cnnvd
- https://security.netapp.com/advisory/ntap-20201113-0002/cnnvd
- https://security.netapp.com/advisory/ntap-20201113-0004/cnnvd
- https://security.netapp.com/advisory/ntap-20201113-0005/cnnvd
- https://support.lenovo.com/us/en/product_security/LEN-39432cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-131-15cnnvd
- https://vigilance.fr/vulnerability/Intel-Processors-multiple-vulnerabilities-via-CSME-SPS-TXE-AMT-DAL-33887cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan