CVE-2020-8675
MEDIUMIntel(R) Innovation Engine <1.0.859 - Privilege Escalation
Title source: llmDescription
Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00366.html
Scores
CVSS v3
6.8
EPSS
0.0010
EPSS Percentile
26.8%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (1)
intel/innovation_engine_firmware
< 1.0.859
Published
Jun 15, 2020
Tracked Since
Feb 18, 2026