Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-8745 Details

Description

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf	CVE	PatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0002/	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0005/	CVE	Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391	CVE	Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf	[email protected]	PatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0002/	[email protected]	Third Party Advisory
https://security.netapp.com/advisory/ntap-20201113-0005/	[email protected]	Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391	[email protected]	Vendor Advisory

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
intel converged security and manageability engine	< 11.8.80 >= 11.12.0, < 11.12.80 >= 11.22.0, < 11.22.80 >= 12.0, < 12.0.70 >= 14.0, < 14.0.45
CPE cpe:2.3:a:intel:converged_security_and_manageability_engine:::::::: Remediation No remediation found in references.
intel trusted execution technology	< 3.1.80 >= 4.0, < 4.0.30
CPE cpe:2.3:a:intel:trusted_execution_technology:::::::: Remediation No remediation found in references.
siemens simatic drive controller firmware	< 05.00.01.00
CPE cpe:2.3:o:siemens:simatic_drive_controller_firmware:::::::: Remediation No remediation found in references.
siemens simatic drive controller	All versions
CPE cpe:2.3:h:siemens:simatic_drive_controller:-:::::::* Remediation No remediation found in references.
siemens simatic et200sp 1515sp pc2 firmware	< 0209.0105
CPE cpe:2.3:o:siemens:simatic_et200sp_1515sp_pc2_firmware:::::::: Remediation No remediation found in references.
siemens simatic et200sp 1515sp pc2	All versions
CPE cpe:2.3:h:siemens:simatic_et200sp_1515sp_pc2:-:::::::* Remediation No remediation found in references.
siemens simatic field pg m5 firmware	< 22.01.08
CPE cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:::::::: Remediation No remediation found in references.
siemens simatic field pg m5	All versions
CPE cpe:2.3:h:siemens:simatic_field_pg_m5:-:::::::* Remediation No remediation found in references.
siemens simatic field pg m6 firmware	All versions
CPE cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:-:::::::* Remediation No remediation found in references.
siemens simatic field pg m6	All versions
CPE cpe:2.3:h:siemens:simatic_field_pg_m6:-:::::::* Remediation No remediation found in references.
siemens simatic ipc127e firmware	< 27.01.05
CPE cpe:2.3:o:siemens:simatic_ipc127e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc127e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc127e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc427e firmware	< 27.01.05
CPE cpe:2.3:o:siemens:simatic_ipc427e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc427e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc427e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc477e firmware	< 21.01.15
CPE cpe:2.3:o:siemens:simatic_ipc477e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc477e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc477e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc477e pro	All versions
CPE cpe:2.3:h:siemens:simatic_ipc477e_pro:-:::::::* Remediation No remediation found in references.
siemens simatic ipc527g firmware	< 1.4.0
CPE cpe:2.3:o:siemens:simatic_ipc527g_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc527g	All versions
CPE cpe:2.3:h:siemens:simatic_ipc527g:-:::::::* Remediation No remediation found in references.
siemens simatic ipc547g firmware	< r1.30.0
CPE cpe:2.3:o:siemens:simatic_ipc547g_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc547g	All versions
CPE cpe:2.3:h:siemens:simatic_ipc547g:-:::::::* Remediation No remediation found in references.
siemens simatic ipc627e firmware	< 25.02.08
CPE cpe:2.3:o:siemens:simatic_ipc627e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc627e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc627e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc647e firmware	< 25.02.08
CPE cpe:2.3:o:siemens:simatic_ipc647e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc647e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc647e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc667e firmware	< 25.02.08
CPE cpe:2.3:o:siemens:simatic_ipc667e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc667e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc667e:-:::::::* Remediation No remediation found in references.
siemens simatic ipc847e firmware	< 25.02.08
CPE cpe:2.3:o:siemens:simatic_ipc847e_firmware:::::::: Remediation No remediation found in references.
siemens simatic ipc847e	All versions
CPE cpe:2.3:h:siemens:simatic_ipc847e:-:::::::* Remediation No remediation found in references.
siemens simatic itp1000 firmware	< 23.01.08
CPE cpe:2.3:o:siemens:simatic_itp1000_firmware:::::::: Remediation No remediation found in references.
siemens simatic itp1000	All versions
CPE cpe:2.3:h:siemens:simatic_itp1000:-:::::::* Remediation No remediation found in references.
siemens sinumerik 828d hw pu.4 firmware	< 08.00.00.00
CPE cpe:2.3:o:siemens:sinumerik_828d_hw_pu.4_firmware:::::::: Remediation No remediation found in references.
siemens sinumerik 828d hw pu.4	All versions
CPE cpe:2.3:h:siemens:sinumerik_828d_hw_pu.4:-:::::::* Remediation No remediation found in references.
siemens sinumerik mc mcu 1720 firmware	< 05.00.00.00
CPE cpe:2.3:o:siemens:sinumerik_mc_mcu_1720_firmware:::::::: Remediation No remediation found in references.
siemens sinumerik mc mcu 1720	All versions
CPE cpe:2.3:h:siemens:sinumerik_mc_mcu_1720:-:::::::* Remediation No remediation found in references.
siemens sinumerik one firmware	All versions
CPE cpe:2.3:o:siemens:sinumerik_one_firmware:-:::::::* Remediation No remediation found in references.
siemens sinumerik one	All versions
CPE cpe:2.3:h:siemens:sinumerik_one:-:::::::* Remediation No remediation found in references.
siemens sinumerik 840d sl ht 10 firmware	All versions
CPE cpe:2.3:o:siemens:sinumerik_840d_sl_ht_10_firmware:-:::::::* Remediation No remediation found in references.
siemens sinumerik 840d sl ht 10	All versions
CPE cpe:2.3:h:siemens:sinumerik_840d_sl_ht_10:-:::::::* Remediation No remediation found in references.
siemens sinumerik one ncu 1740 firmware	< 04.00.00.00
CPE cpe:2.3:o:siemens:sinumerik_one_ncu_1740_firmware:::::::: Remediation No remediation found in references.
siemens sinumerik one ncu 1740	All versions
CPE cpe:2.3:h:siemens:sinumerik_one_ncu_1740:-:::::::* Remediation No remediation found in references.
siemens sinumerik one ppu 1740 firmware	< 06.00.00.00
CPE cpe:2.3:o:siemens:sinumerik_one_ppu_1740_firmware:::::::: Remediation No remediation found in references.
siemens sinumerik one ppu 1740	All versions
CPE cpe:2.3:h:siemens:sinumerik_one_ppu_1740:-:::::::* Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Mar 28, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 14, 2022	Modified Analysis	[email protected]
Jul 21, 2021	CWE Remap	[email protected]
May 11, 2021	CVE Modified	[email protected]
Nov 24, 2020	Initial Analysis	[email protected]
Nov 13, 2020	CVE Modified	[email protected]

CVE-2020-8745 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation