What’s Vulnerable › Vulnerabilities
CVE-2020-8698
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-11-12 · updated 2026-06-17
- Weakness: CWE-668
Description
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Affected products
- Debian Linux: 9.0
- Fedoraproject Fedora: 31
- Intel Microcode: all versions
- Clustered Data ONTAP: all versions
- NetApp Hci Compute Node Bios: all versions
- NetApp Hci Storage Node Bios: all versions
- NetApp Solidfire Bios: all versions
- Siemens Simatic Field Pg M5 Firmware: before 22.01.08 — fixed in 22.01.08
- Siemens Simatic Field Pg M6 Firmware: all versions
- Siemens Simatic Ipc427E Firmware: before 21.01.15 — fixed in 21.01.15
- Siemens Simatic Ipc477E Firmware: before 21.01.15 — fixed in 21.01.15
- Siemens Simatic Ipc477E Pro Firmware: before 21.01.15 — fixed in 21.01.15
- Siemens Simatic Ipc627E Firmware: before 25.02.08 — fixed in 25.02.08
- Siemens Simatic Ipc647E Firmware: before 25.02.08 — fixed in 25.02.08
- Siemens Simatic Ipc677E Firmware: before 25.02.08 — fixed in 25.02.08
- Siemens Simatic Ipc847E Firmware: before 25.02.08 — fixed in 25.02.08
- Siemens Simatic Itp1000 Firmware: before 23.01.08 — fixed in 23.01.08
How to fix
Upgrade to a fixed version: Siemens Simatic Field Pg M5 Firmware 22.01.08; Siemens Simatic Ipc427E Firmware 21.01.15; Siemens Simatic Ipc477E Firmware 21.01.15; Siemens Simatic Ipc477E Pro Firmware 21.01.15; Siemens Simatic Ipc627E Firmware 25.02.08; Siemens Simatic Ipc647E Firmware 25.02.08; Siemens Simatic Ipc677E Firmware 25.02.08; Siemens Simatic Ipc847E Firmware 25.02.08; Siemens Simatic Itp1000 Firmware 23.01.08. Check the vendor advisory for mitigations.
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
- https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/
- https://security.netapp.com/advisory/ntap-20201113-0006/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381
- https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
- https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/
- https://security.netapp.com/advisory/ntap-20201113-0006/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381
Get alerted when CVE-2020-8698 or the next vulnerability affects your stack