CVE-2020-8698medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381
https://security.netapp.com/advisory/ntap-20201113-0006/
https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html
https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf
Details
Source: MITRE
Published: 2020-11-12
Updated: 2021-07-21
Type: NVD-CWE-noinfo
Risk Information
CVSS v2
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
AND
OR
OR
cpe:2.3:h:intel:core_i3-1000g1:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1000g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1005g1:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1110g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1115g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1120g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i3-1125g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1030g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1030g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1035g1:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1035g4:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1035g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1065g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1060g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1185g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-1165g7:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i5-1135g7:-:*:*:*:*:*:*:*
Configuration 2
OR
Configuration 3
AND
OR
OR
Configuration 4
AND
OR
OR
Configuration 5
AND
OR
OR
Configuration 6
OR
Configuration 7
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 154591 | NewStart CGSL CORE 5.05 / MAIN 5.05 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0165) | Nessus | NewStart CGSL Local Security Checks | medium |
| 152965 | RHEL 7 : microcode_ctl (RHSA-2021:3323) | Nessus | Red Hat Local Security Checks | high |
| 152955 | RHEL 7 : microcode_ctl (RHSA-2021:3322) | Nessus | Red Hat Local Security Checks | high |
| 152930 | RHEL 8 : microcode_ctl (RHSA-2021:3364) | Nessus | Red Hat Local Security Checks | high |
| 152926 | RHEL 7 : microcode_ctl (RHSA-2021:3317) | Nessus | Red Hat Local Security Checks | high |
| 152779 | RHEL 7 : microcode_ctl (RHSA-2021:3255) | Nessus | Red Hat Local Security Checks | high |
| 152627 | RHEL 8 : microcode_ctl (RHSA-2021:3176) | Nessus | Red Hat Local Security Checks | high |
| 152447 | RHEL 7 : microcode_ctl (RHSA-2021:3029) | Nessus | Red Hat Local Security Checks | high |
| 152367 | CentOS 8 : microcode_ctl (CESA-2021:3027) | Nessus | CentOS Local Security Checks | high |
| 152366 | Oracle Linux 7 : microcode_ctl (ELSA-2021-3028) | Nessus | Oracle Linux Local Security Checks | high |
| 152365 | Oracle Linux 8 : microcode_ctl (ELSA-2021-3027) | Nessus | Oracle Linux Local Security Checks | high |
| 152364 | Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:3028) | Nessus | Scientific Linux Local Security Checks | high |
| 152360 | CentOS 7 : microcode_ctl (CESA-2021:3028) | Nessus | CentOS Local Security Checks | high |
| 152353 | RHEL 7 : microcode_ctl (RHSA-2021:3028) | Nessus | Red Hat Local Security Checks | high |
| 152351 | RHEL 8 : microcode_ctl (RHSA-2021:3027) | Nessus | Red Hat Local Security Checks | high |
| 150603 | SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2020:14546-1) | Nessus | SuSE Local Security Checks | medium |
| 150541 | SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2020:14540-1) | Nessus | SuSE Local Security Checks | medium |
| 149521 | Ubuntu 18.04 LTS / 20.04 LTS / 20.10 / 21.04 : Intel Microcode vulnerabilities (USN-4628-3) | Nessus | Ubuntu Local Security Checks | medium |
| 147710 | NewStart CGSL CORE 5.04 / MAIN 5.04 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0040) | Nessus | NewStart CGSL Local Security Checks | medium |
| 147405 | NewStart CGSL MAIN 4.06 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0001) | Nessus | NewStart CGSL Local Security Checks | medium |
| 147243 | NewStart CGSL MAIN 6.02 : microcode_ctl Multiple Vulnerabilities (NS-SA-2021-0079) | Nessus | NewStart CGSL Local Security Checks | medium |
| 146278 | Debian DLA-2546-1 : intel-microcode security update | Nessus | Debian Local Security Checks | medium |
| 145932 | CentOS 8 : microcode_ctl (CESA-2020:5085) | Nessus | CentOS Local Security Checks | medium |
| 144442 | Virtuozzo 7 : microcode_ctl (VZLSA-2020-5083) | Nessus | Virtuozzo Local Security Checks | medium |
| 143852 | SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3372-1) | Nessus | SuSE Local Security Checks | medium |
| 143841 | SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3279-1) | Nessus | SuSE Local Security Checks | medium |
| 143814 | SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3457-1) | Nessus | SuSE Local Security Checks | medium |
| 143763 | SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3276-1) | Nessus | SuSE Local Security Checks | medium |
| 143735 | SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3514-1) | Nessus | SuSE Local Security Checks | medium |
| 143728 | SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3373-1) | Nessus | SuSE Local Security Checks | medium |
| 143719 | SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3271-1) | Nessus | SuSE Local Security Checks | medium |
| 143624 | SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3274-1) | Nessus | SuSE Local Security Checks | medium |
| 143603 | RHEL 8 : microcode_ctl (RHSA-2020:5369) | Nessus | Red Hat Local Security Checks | medium |
| 143339 | openSUSE Security Update : ucode-intel (openSUSE-2020-2098) | Nessus | SuSE Local Security Checks | medium |
| 143330 | Fedora 32 : 2:microcode_ctl (2020-1afbe7ba2d) | Nessus | Fedora Local Security Checks | medium |
| 143297 | openSUSE Security Update : ucode-intel (openSUSE-2020-2075) | Nessus | SuSE Local Security Checks | medium |
| 143212 | RHEL 7 : microcode_ctl (RHSA-2020:5182) | Nessus | Red Hat Local Security Checks | medium |
| 143211 | RHEL 6 : microcode_ctl (RHSA-2020:5189) | Nessus | Red Hat Local Security Checks | medium |
| 143209 | RHEL 6 : microcode_ctl (RHSA-2020:5184) | Nessus | Red Hat Local Security Checks | medium |
| 143208 | RHEL 8 : microcode_ctl (RHSA-2020:5186) | Nessus | Red Hat Local Security Checks | medium |
| 143205 | RHEL 8 : microcode_ctl (RHSA-2020:5185) | Nessus | Red Hat Local Security Checks | medium |
| 143204 | RHEL 7 : microcode_ctl (RHSA-2020:5190) | Nessus | Red Hat Local Security Checks | medium |
| 143203 | RHEL 7 : microcode_ctl (RHSA-2020:5183) | Nessus | Red Hat Local Security Checks | medium |
| 143202 | RHEL 7 : microcode_ctl (RHSA-2020:5188) | Nessus | Red Hat Local Security Checks | medium |
| 143200 | RHEL 7 : microcode_ctl (RHSA-2020:5181) | Nessus | Red Hat Local Security Checks | medium |
| 143171 | Fedora 33 : 2:microcode_ctl (2020-2c8824c6b1) | Nessus | Fedora Local Security Checks | medium |
| 143137 | Fedora 31 : 2:microcode_ctl (2020-14fda1bf85) | Nessus | Fedora Local Security Checks | medium |
| 143132 | OracleVM 3.4 : microcode_ctl (OVMSA-2020-0053) | Nessus | OracleVM Local Security Checks | medium |
| 143113 | CentOS 7 : microcode_ctl (CESA-2020:5083) | Nessus | CentOS Local Security Checks | medium |
| 143043 | Security Updates for Windows 10 / Windows Server 2016 / Windows Server 2019 (November 2020) | Nessus | Windows : Microsoft Bulletins | medium |
| 142999 | Scientific Linux Security Update : microcode_ctl on SL6.x i686/x86_64 (2020:5084) | Nessus | Scientific Linux Local Security Checks | medium |
| 142964 | Oracle Linux 7 : microcode_ctl (ELSA-2020-5083) | Nessus | Oracle Linux Local Security Checks | medium |
| 142963 | Oracle Linux 8 : microcode_ctl (ELSA-2020-5085) | Nessus | Oracle Linux Local Security Checks | medium |
| 142961 | Oracle Linux 6 : microcode_ctl (ELSA-2020-5084) | Nessus | Oracle Linux Local Security Checks | medium |
| 142938 | openSUSE Security Update : ucode-intel (openSUSE-2020-1915) | Nessus | SuSE Local Security Checks | medium |
| 142929 | openSUSE Security Update : ucode-intel (openSUSE-2020-1923) | Nessus | SuSE Local Security Checks | medium |
| 142817 | Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2020:5083) | Nessus | Scientific Linux Local Security Checks | medium |
| 142731 | Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 : Intel Microcode vulnerabilities (USN-4628-1) | Nessus | Ubuntu Local Security Checks | medium |
| 142716 | RHEL 6 : microcode_ctl (RHSA-2020:5084) | Nessus | Red Hat Local Security Checks | medium |
| 142715 | RHEL 7 : microcode_ctl (RHSA-2020:5083) | Nessus | Red Hat Local Security Checks | medium |
| 142714 | RHEL 8 : microcode_ctl (RHSA-2020:5085) | Nessus | Red Hat Local Security Checks | medium |