High severity · published Jun 15, 2020
CVE-2020-0528
Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable…
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Core I5-7200u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7260u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7267u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7287u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7300hq Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7300u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7360u Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7400 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7400t Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7440eq Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7440hq Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-7442eq Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0528
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0528
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00322.html
More from Core I5-7200u Firmware
7.8
CVE-2020-0529
Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation…
5.5
CVE-2020-8695
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access
5.5
CVE-2020-8694
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
5.5
CVE-2019-0185
Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; Intel(R) Xeon(R) Processor E3-1500 v5…
4.4
CVE-2019-0117
Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor…