Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 1…

published 2020-11-12 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-29553

cvss: 6.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 43%
public exploits: 0; none known

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

Patch / fix

fixed in 1

intel converged_security_and_manageability_engine 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45

Exploit prediction

0.50% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.1	6.8	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	4.6	AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

n/a Intel(R) Boot Guard, Intel(R) CSME, Intel(R) TXE, Intel(R) SPS

Classification

Weakness

CWE-1188 Initialization of a Resource with an Insecure Default

References

intel.com /content/www/us/en/security-center/advisory/intel-sa-00391
vendor-advisory
security.netapp.com /advisory/ntap-20201113-0004/
third-party-advisory
security.netapp.com /advisory/ntap-20201113-0005/
third-party-advisory
security.netapp.com /advisory/ntap-20201113-0002/
third-party-advisory

Sources

CVE List CVE-2020-8705
NVD CVE-2020-8705

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary