Search/CVE-2020-8745
● CVE — Medium

CVE-2020-8745

Vendorsiemens, intelProductsimatic field pg m5 firmware, simatic ipc427e firmware, simatic ipc477e firmware, simatic itp1000 firmware, trusted execution technology, converged security and manageability engine, simatic field pg m6 firmware, simatic ipc627e firmware, simatic ipc647e firmware, simatic ipc847e firmware, simatic drive controller firmware, simatic et200sp 1515sp pc2 firmware, simatic ipc127e firmware, simatic ipc527g firmware, simatic ipc547g firmware, simatic ipc667e firmware, sinumerik 828d hw pu.4 firmware, sinumerik 840d sl ht 10 firmware, sinumerik mc mcu 1720 firmware, sinumerik one firmware, sinumerik one ncu 1740 firmware, sinumerik one ppu 1740 firmwareDiscoveredNov 12, 2020UpdatedMar 28, 2025

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CVSS v3.1
6.8 MEDIUM
EPSS
0.38%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage