CVE-2020-8698

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-8698
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/
https://security.netapp.com/advisory/ntap-20201113-0006/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:microcode:-:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:core_i3-1000g1:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1000g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1005g1:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1110g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1115g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1120g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1125g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1030g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1030g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1035g1:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1035g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1035g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1130g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1135g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1060g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1065g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1160g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1165g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1185g7:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netapp:hci_compute_node_bios:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netapp:hci_storage_node_bios:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netapp:solidfire_bios:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:solidfire:-:*:*:*:*:*:*:*

Configuration 6 (hide)

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*
History

07 Nov 2023, 03:26

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/', 'name': 'FEDORA-2020-14fda1bf85', 'tags': ['Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/ -

26 Apr 2022, 16:33

Type Values Removed Values Added
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf - Third Party Advisory
CWE NVD-CWE-noinfo CWE-668
CPE cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc477e_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*
First Time Siemens simatic Ipc627e Firmware
Siemens
Siemens simatic Ipc477e Firmware
Siemens simatic Ipc847e Firmware
Siemens simatic Itp1000
Siemens simatic Field Pg M5 Firmware
Siemens simatic Field Pg M5
Siemens simatic Ipc427e
Siemens simatic Ipc677e Firmware
Siemens simatic Ipc647e Firmware
Siemens simatic Ipc627e
Siemens simatic Ipc677e
Siemens simatic Ipc847e
Siemens simatic Ipc477e Pro
Siemens simatic Ipc427e Firmware
Siemens simatic Field Pg M6 Firmware
Siemens simatic Ipc477e
Siemens simatic Ipc647e
Siemens simatic Field Pg M6
Siemens simatic Ipc477e Pro Firmware
Siemens simatic Itp1000 Firmware

21 Jul 2021, 11:39

Type Values Removed Values Added
CPE cpe:2.3:a:intel:microcode:-:*:*:*:*:*:*:* cpe:2.3:o:intel:microcode:-:*:*:*:*:*:*:*

11 May 2021, 13:15

Type Values Removed Values Added
References
  • (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf -

11 Feb 2021, 19:50

Type Values Removed Values Added
CPE cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
References (MLIST) https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html - (MLIST) https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html - Mailing List, Third Party Advisory

05 Feb 2021, 21:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html -
Information

Published : 2020-11-12 18:15

Updated : 2023-12-10 13:41

NVD link : CVE-2020-8698

Mitre link : CVE-2020-8698

CVE.ORG link : CVE-2020-8698

JSON object : View

Products Affected

intel

  • core_i5-1035g7
  • core_i3-1005g1
  • core_i5-1135g7
  • core_i3-1115g4
  • core_i7-1165g7
  • core_i3-1000g1
  • core_i5-1030g7
  • core_i5-1035g4
  • core_i5-1030g4
  • core_i3-1120g4
  • core_i7-1160g7
  • core_i7-1065g7
  • core_i5-1130g7
  • core_i7-1060g7
  • core_i3-1110g4
  • core_i5-1035g1
  • microcode
  • core_i7-1185g7
  • core_i3-1125g4
  • core_i3-1000g4

netapp

  • hci_storage_node
  • solidfire_bios
  • hci_storage_node_bios
  • clustered_data_ontap
  • hci_compute_node
  • hci_compute_node_bios
  • solidfire

siemens

  • simatic_ipc647e
  • simatic_ipc627e_firmware
  • simatic_itp1000
  • simatic_field_pg_m5
  • simatic_field_pg_m6
  • simatic_ipc427e
  • simatic_ipc477e_pro_firmware
  • simatic_itp1000_firmware
  • simatic_ipc677e
  • simatic_ipc477e_firmware
  • simatic_ipc847e
  • simatic_field_pg_m5_firmware
  • simatic_ipc477e_pro
  • simatic_field_pg_m6_firmware
  • simatic_ipc677e_firmware
  • simatic_ipc847e_firmware
  • simatic_ipc627e
  • simatic_ipc427e_firmware
  • simatic_ipc647e_firmware
  • simatic_ipc477e

fedoraproject

  • fedora

debian

  • debian_linux
CWE
CWE-668

Exposure of Resource to Wrong Sphere