CVE-2020-8705

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-12 · updated 2026-06-17
Weakness: CWE-1188

Description

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

Affected products

Intel Converged Security And Manageability Engine: before 11.8.80; from 11.12.0 before 11.12.80; from 11.22.0 before 11.22.80; from 12.0 before 12.0.70; from 13.0 before 13.0.40; from 13.30.0 before 13.30.10 — fixed in 11.12.80, 11.22.80, 11.8.80, 12.0.70, 13.0.40, 13.30.10
Intel(R) Server Platform Services (SPS): sps_e3_04.01.04.200, sps_e5_04.01.04.400, sps_soc-a_04.00.04.300, sps_soc-x_04.00.04.200
Intel Trusted Execution Technology: 3.1.80, 4.0.30

How to fix

Upgrade to a fixed version: Intel Converged Security And Manageability Engine 11.12.80, 11.22.80, 11.8.80, 12.0.70. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-8705 or the next vulnerability affects your stack