CVE-2020-24457
mediumpriority · track · 30EPSS 0.004 · 33 %ileEURUUSEPSS · scored 2026-10-27
Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.6
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (55)
Products and version ranges known to be affected.
- intel core i7-10510u firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10510u_firmware:*:*:*:*:*:*:*:*
- intel core i7-10510y firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10510y_firmware:*:*:*:*:*:*:*:*
- intel core i7-1060g7 firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-1060g7_firmware:*:*:*:*:*:*:*:*
- intel core i7-10610u firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10610u_firmware:*:*:*:*:*:*:*:*
- intel core i7-1065g7 firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-1065g7_firmware:*:*:*:*:*:*:*:*
- intel core i7-1068ng7 firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-1068ng7_firmware:*:*:*:*:*:*:*:*
- intel core i7-10700e firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10700e_firmware:*:*:*:*:*:*:*:*
- intel core i7-10700f firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10700f_firmware:*:*:*:*:*:*:*:*
- intel core i7-10700k firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10700k_firmware:*:*:*:*:*:*:*:*
- intel core i7-10700kf firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10700kf_firmware:*:*:*:*:*:*:*:*
- intel core i7-10700t firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10700t_firmware:*:*:*:*:*:*:*:*
- intel core i7-10700te firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10700te_firmware:*:*:*:*:*:*:*:*
- intel core i7-10710u firmwareall versionsnvdUScpe:2.3:o:intel:core_i7-10710u_firmware:*:*:*:*:*:*:*:*
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2020-24457cnnvd
- https://support.lenovo.com/us/en/product_security/LEN-37550cnnvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00347.htmlcnnvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00347.htmlenisa_euvd
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00347.htmlVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan