CVE-2020-0593

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors	See references

References

https://security.netapp.com/advisory/ntap-20201113-0001/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358Vendor Advisory
https://security.netapp.com/advisory/ntap-20201113-0001/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358Vendor Advisory

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-05949.8Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an u CVE-2020-05959.8Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unaut CVE-2020-05967.5Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may a CVE-2020-05977.5Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potential CVE-2020-05987.8Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated u CVE-2020-05996.7Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege vi CVE-2020-06007.8Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege CVE-2020-06018.1A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attac CVE-2020-06027.5A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit CVE-2020-06038.8A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who su CVE-2020-06047.8A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project. An attacke CVE-2020-06058.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s