CVE-2020-8705 Vulnerability Analysis & Exploit Details

CVE-2020-8705 Vulnerability Summary

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

CVE-2020-8705 Detailed Information and External References

Exploit Prediction Scoring System (EPSS)

The EPSS score estimates the probability that this vulnerability will be exploited in the near future.

0.00200

EPSS %

0.58305

References

• https://security.netapp.com/advisory/ntap-20201113-0002/
• https://security.netapp.com/advisory/ntap-20201113-0004/
• https://security.netapp.com/advisory/ntap-20201113-0005/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
• https://security.netapp.com/advisory/ntap-20201113-0002/
• https://security.netapp.com/advisory/ntap-20201113-0004/
• https://security.netapp.com/advisory/ntap-20201113-0005/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391

CWE

CWE-1188

CAPEC

• Exploitation of Thunderbolt Protection Flaws CAPEC-665 An adversary leverages a firmware weakness within the Thunderbolt protocol, on a computing device to manipulate Thunderbolt controller firmware in order to exploit vulnerabilities in the implementation of authorization and verification schemes within Thunderbolt protection mechanisms. Upon gaining physical access to a target device, the adversary conducts high-level firmware manipulation of the victim Thunderbolt controller SPI (Serial Peripheral Interface) flash, through the use of a SPI Programing device and an external Thunderbolt device, typically as the target device is booting up. If successful, this allows the adversary to modify memory, subvert authentication mechanisms, spoof identities and content, and extract data and memory from the target device. Currently 7 major vulnerabilities exist within Thunderbolt protocol with 9 attack vectors as noted in the Execution Flow.

Vulnerable Configurations

• cpe:2.3:a:intel:converged_security_and_manageability_engine:-:*:*:*:*:*:*:*
  cpe:2.3:a:intel:converged_security_and_manageability_engine:-:*:*:*:*:*:*:*
• cpe:2.3:a:intel:converged_security_and_manageability_engine:13.0:*:*:*:*:*:*:*
  cpe:2.3:a:intel:converged_security_and_manageability_engine:13.0:*:*:*:*:*:*:*
• cpe:2.3:a:intel:converged_security_and_manageability_engine:13.30.0:*:*:*:*:*:*:*
  cpe:2.3:a:intel:converged_security_and_manageability_engine:13.30.0:*:*:*:*:*:*:*
• cpe:2.3:a:intel:trusted_execution_technology:3.1.80:*:*:*:*:*:*:*
  cpe:2.3:a:intel:trusted_execution_technology:3.1.80:*:*:*:*:*:*:*
• cpe:2.3:a:intel:trusted_execution_technology:4.0.30:*:*:*:*:*:*:*
  cpe:2.3:a:intel:trusted_execution_technology:4.0.30:*:*:*:*:*:*:*
• cpe:2.3:a:intel:server_platform_services:sps_e3_04.01.04.200:*:*:*:*:*:*:*
  cpe:2.3:a:intel:server_platform_services:sps_e3_04.01.04.200:*:*:*:*:*:*:*
• cpe:2.3:a:intel:server_platform_services:sps_e5_04.01.04.400:*:*:*:*:*:*:*
  cpe:2.3:a:intel:server_platform_services:sps_e5_04.01.04.400:*:*:*:*:*:*:*
• cpe:2.3:a:intel:server_platform_services:sps_soc-a_04.00.04.300:*:*:*:*:*:*:*
  cpe:2.3:a:intel:server_platform_services:sps_soc-a_04.00.04.300:*:*:*:*:*:*:*
• cpe:2.3:a:intel:server_platform_services:sps_soc-x_04.00.04.200:*:*:*:*:*:*:*
  cpe:2.3:a:intel:server_platform_services:sps_soc-x_04.00.04.200:*:*:*:*:*:*:*

CVSS3 Source

nvd@nist.gov

CVSS3 Type

Primary

CVSS3 Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H