CVE-2020-8684

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Improper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel Acceleration Stack version 1.2.1 may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) PAC with Arria(R) 10 GX FPGA Advisory	Before version 1.2.1

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00375.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00375.htmlPatch, Vendor Advisory

Timeline

Published: Aug 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-86854.4Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable CVE-2020-86877.8Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB before version 4.7.CVE-2020-86887.5Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of CVE-2020-86896.5Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially en CVE-2020-86906.7Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enabl CVE-2020-86916.7A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation o CVE-2020-86926.7Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user t CVE-2020-86936.7Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enab CVE-2020-86945.5Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable in CVE-2020-86955.5Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disc CVE-2020-86965.5Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentia CVE-2020-86985.5Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclos