CVEvulnerability

CVE-2020-8698

5.5 MEDIUM Published 2020-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-668

Description

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

• intel microcode • netapp clustered data ontap • netapp hci compute node bios • netapp hci storage node bios • netapp solidfire bios • fedoraproject fedora 31 • debian debian linux 9.0 • siemens simatic field pg m5 firmware (< 22.01.08) • siemens simatic field pg m6 firmware • siemens simatic ipc427e firmware (< 21.01.15) • siemens simatic ipc477e firmware (< 21.01.15) • siemens simatic ipc477e pro firmware (< 21.01.15) • siemens simatic ipc627e firmware (< 25.02.08) • siemens simatic ipc647e firmware (< 25.02.08) • siemens simatic ipc677e firmware (< 25.02.08) • siemens simatic ipc847e firmware (< 25.02.08) • siemens simatic itp1000 firmware (< 23.01.08)

Related

Weakness · CWE (1)

  • CWE-668 Exposure of Resource to Wrong Sphere weakness

Referenced by CWE · observed example (2)

  • CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC) weakness
  • CWE-1422 Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution weakness

References