Rewterz Threat Advisory – CVE-2020-0592 – Intel BIOS firmware for multiple Processors privilege escalation

Severity

Low

Analysis Summary

Intel BIOS firmware for multiple Processors could allow a local authenticated attacker to gain elevated privileges on the system, caused by an out-of-bounds write flaw. By sending a specially-crafted request, an attacker could exploit this vulnerability to gain elevated privileges or cause a denial of service condition.

Impact

• Privilege escalation
• Denial of service

Affected Vendors

Intel

Affected Products

• Intel Xeon Processor D Family
• Intel Xeon Scalable Processor
• Intel Xeon Processor E7 v4 Family
• Intel 2nd Generation Xeon Scalable Processor

Remediation

Refer to INTEL-SA-00358 for patch, upgrade or suggested workaround information.

INTEL-SA-00358