CVE-2020-8670

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-09 · updated 2026-10-08
Weakness: CWE-362

Description

Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel BIOS: all versions
NetApp Aff Bios: all versions
NetApp Cloud Backup: all versions
NetApp Fas Bios: all versions
NetApp Hci Compute Node Bios: all versions
NetApp Hci Storage Node Bios: all versions
NetApp Solidfire Bios: all versions
Siemens Simatic Field Pg M6 Firmware: all versions
Siemens Simatic Ipc427E Firmware: all versions
Siemens Simatic Ipc477E Firmware: all versions
Siemens Simatic Ipc477E Pro Firmware: all versions
Siemens Simatic Ipc527G Firmware: all versions
Siemens Simatic Ipc547G Firmware: all versions
Siemens Simatic Ipc627E Firmware: before 25.02.10 — fixed in 25.02.10
Siemens Simatic Ipc647E Firmware: before 25.02.10 — fixed in 25.02.10
Siemens Simatic Ipc677E Firmware: before 25.02.10 — fixed in 25.02.10
Siemens Simatic Ipc847E Firmware: before 25.02.10 — fixed in 25.02.10
Siemens Simatic Itp1000 Firmware: all versions

How to fix

Upgrade to a fixed version: Siemens Simatic Ipc627E Firmware 25.02.10; Siemens Simatic Ipc647E Firmware 25.02.10; Siemens Simatic Ipc677E Firmware 25.02.10; Siemens Simatic Ipc847E Firmware 25.02.10. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-8670 or the next vulnerability affects your stack