CVE-2020-8670

mediumpriority · track · 26OT risk · elevatedEPSS 0.003 · 19 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.27% (19th) EPSS

CVSS 4.4 · medium

Is it mine?

111 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · siemens_psirt

EPSS · scored 2026-10-27

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC Field PG M6siemens_psirt
Update BIOS to V26.01.08 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC3000 SMART V3siemens_psirt
Update BIOS to V01.04.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC347Gsiemens_psirt
Update BIOS to V01.04.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC427Esiemens_psirt
Update BIOS to V21.01.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC477Esiemens_psirt
Update BIOS to V21.01.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC477E Prosiemens_psirt
Update BIOS to V21.01.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC527Gsiemens_psirt
Update BIOS to V1.4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC627Esiemens_psirt
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC647Esiemens_psirt
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC677Esiemens_psirt
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC847Esiemens_psirt
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC ITP1000siemens_psirt
Update BIOS to V23.01.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSINUMERIK 828D HW PU.4siemens_psirt
Update BIOS to V08.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK MC MCU 1720siemens_psirt
Update BIOS to V05.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10siemens_psirt
Update BIOS to V08.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK ONE NCU 1740siemens_psirt
Update BIOS to V05.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK ONE PPU 1740siemens_psirt
Update BIOS to V06.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSIMATIC Field PG M6cisa_csaf_ot
Update BIOS to V26.01.08 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC3000 SMART V3cisa_csaf_ot
Update BIOS to V01.04.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC347Gcisa_csaf_ot
Update BIOS to V01.04.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC427Ecisa_csaf_ot
Update BIOS to V21.01.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC477Ecisa_csaf_ot
Update BIOS to V21.01.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC477E Procisa_csaf_ot
Update BIOS to V21.01.16 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC527Gcisa_csaf_ot
Update BIOS to V1.4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC627Ecisa_csaf_ot
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC647Ecisa_csaf_ot
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC677Ecisa_csaf_ot
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC IPC847Ecisa_csaf_ot
Update BIOS to V25.02.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSIMATIC ITP1000cisa_csaf_ot
Update BIOS to V23.01.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763408
FixedSINUMERIK 828D HW PU.4cisa_csaf_ot
Update BIOS to V08.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK MC MCU 1720cisa_csaf_ot
Update BIOS to V05.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10cisa_csaf_ot
Update BIOS to V08.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK ONE NCU 1740cisa_csaf_ot
Update BIOS to V05.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedSINUMERIK ONE PPU 1740cisa_csaf_ot
Update BIOS to V06.00.00.00 or later version SINUMERIK software can be obtained from your local Siemens account manager.
FixedMELIPC MI1002-Wcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELIPC MI2012-Wcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELIPC MI3315G-Wcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELIPC MI3321G-Wcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELIPC MI5122-VMcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELSEC Q Q24DHCCPU-LScisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELSEC Q Q24DHCCPU-Vcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELSEC Q Q24DHCCPU-VGcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELSEC Q Q26DHCCPU-LScisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
FixedMELSEC iQ-R R102WCPU-Wcisa_csaf_ot
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting these vulnerabilities:
MitigationSIMATIC Field PG M6siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC3000 SMART V3siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC347Gsiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC427Esiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC477Esiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC477E Prosiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC527Gsiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC547Gsiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC627Esiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC647Esiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC677Esiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC847Esiemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC ITP1000siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK 828D HW PU.4siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK MC MCU 1720siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK ONE NCU 1740siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK ONE PPU 1740siemens_psirt
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC Field PG M6cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC3000 SMART V3cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC347Gcisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC427Ecisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC477Ecisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC477E Procisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC527Gcisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC547Gcisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC627Ecisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC647Ecisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC677Ecisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC IPC847Ecisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSIMATIC ITP1000cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK 828D HW PU.4cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK MC MCU 1720cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK ONE NCU 1740cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
MitigationSINUMERIK ONE PPU 1740cisa_csaf_ot
As a prerequisite for an attack, an attacker must be able to run untrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code if possible.
No fix plannedSIMATIC IPC547Gsiemens_psirt
Currently no fix is planned
No fix plannedSIMATIC IPC547Gcisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–7.5

v2.04.4mediumAV:L/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 3.4 · impact 6.4

v3.16.4mediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.5 · impact 5.9

v3.06.4mediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17.5highCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:Csecondary · CISA US

v3.17.5highCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:Csecondary · Siemens ProductCERT DE

v3.15.9mediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-362USprimaryCWE-1395USCWE-311USCWE-311US

affected products (111)

Products and version ranges known to be affected.

Avaya Aura Application Enablement Servicesall versionscert_bundDEcpe:/a:avaya:aura_application_enablement_services:-
Avaya Aura Communication Managerall versionscert_bundDEcpe:/a:avaya:communication_manager:-
Avaya Aura Device Servicesall versionscert_bundDEcpe:/a:avaya:aura_device_services:-
Avaya Aura Experience Portalall versionscert_bundDEcpe:/a:avaya:aura_experience_portal:-
Avaya Aura Session Managerall versionscert_bundDEcpe:/a:avaya:session_manager:-
Avaya Aura System Managerall versionscert_bundDEcpe:/a:avaya:aura_system_manager:-
Avaya Breeze Platformall versionscert_bundDEcpe:/a:avaya:breeze_platform:-
Avaya CMSall versionscert_bundDEcpe:/a:avaya:call_management_system_server:-
Avaya Session Border Controllerall versionscert_bundDEcpe:/h:avaya:session_border_controller:-
Avaya Web License Managerall versionscert_bundDEcpe:/a:avaya:web_license_manager:-
Avaya one-Xall versionscert_bundDEcpe:/a:avaya:one-x:-
Citrix Systems Hypervisorall versionscert_bundDEcpe:/o:citrix:hypervisor:-
Citrix Systems XenServerall versionscert_bundDEcpe:/a:citrix:xenserver:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell Computerall versionscert_bundDEcpe:/o:dell:dell_computer:-
EMC Avamarall versionscert_bundDEcpe:/a:emc:avamar:-
F5 BIG-IPall versionscert_bundDEcpe:/a:f5:big-ip:-
Gentoo Linuxall versionscert_bundDEcpe:/o:gentoo:linux:-
HPE ProLiantall versionscert_bundDEcpe:/h:hp:proliant:-
Intel Prozessorall versionscert_bundDEcpe:/h:intel:intel_prozessor:-

showing 20 of 111

advisories (4)

Vendor and ecosystem advisories describing this.

SSA-309571SSA-309571: IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)2021-08-10csaf · siemens_psirtDE
Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we summarize: - "2021.1 IPU – Intel® CSME, SPS and LMS Advisory" Intel-SA-00459, - "2021.1 IPU – BIOS Advisory" Intel-SA-00463, - "2021.1 IPU – Intel® Processor Advisory" Intel-SA-00464, and - "2021.1 IPU - Intel Atom® Processor Advisory" Intel-SA-00465. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
WID-SEC-W-2024-1463Intel Prozessoren: Mehrere SchwachstellenDeutsch2021-06-08csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Intel Prozessoren ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
ICSA-21-222-05Siemens Industrial Products Intel CPUs (Update F)2021-08-10icsa · cisa_csaf_otUS
Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we summarize: - "2021.1 IPU – Intel® CSME, SPS and LMS Advisory" Intel-SA-00459, - "2021.1 IPU – BIOS Advisory" Intel-SA-00463, - "2021.1 IPU – Intel® Processor Advisory" Intel-SA-00464, and - "2021.1 IPU - Intel Atom® Processor Advisory" Intel-SA-00465. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
ICSA-23-122-01Mitsubishi Electric Factory Automation Products2023-05-02icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow a malicious attacker to escalate privileges, disclose parameter information in the affected products, and cause a denial-of-service condition.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund siemens_psirt cisa_csaf_ot NVD CVE.org MITRE

published 2021-06-09modified 2026-06-17

related (4,138)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	2025-11-11
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-39964US	medium5.5OT critical	1.57% (75th)	KEV	2025-10-13
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is…
CVE-2025-2783US	—OT critical	9.24% (95th)	KEV	2025-03-26
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malic…
CVE-2025-22224US	high8.2OT critical	1.56% (75th)	KEV	2025-03-04
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges…
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	2023-07-11
Windows Search Remote Code Execution Vulnerability

+4133 more

references (16)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan