CVE-2020-8755

MEDIUM 6.4CVE-2020-8755 · Published 12/11/2020 · updated 17/06/2026

In short

CVE-2020-8755 is a MEDIUM (CVSS 6.4) vulnerability affecting converged security and management engine (intel), server platform services (intel).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.
Fix: update to 14.0.45, 12.0.70, e3_05.01.04.200, e5_04.01.04.400 or later.

Package	Affected versions	Patched versions
converged security and management engine intel	`≥ 14.0.0, < 14.0.45< 12.0.70`	`14.0.4512.0.70`
server platform services intel	`< e3_05.01.04.200< e5_04.01.04.400`	`e3_05.01.04.200e5_04.01.04.400`

Description

Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

References

security.netapp.com/advisory/ntap-20201113-0002 · Third Party Advisory
security.netapp.com/advisory/ntap-20201113-0004 · Third Party Advisory
intel.com/content/www/us/en/security-center/advisory/intel-sa-00391 · Vendor Advisory

More vulnerabilities in converged security and management engine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2020-8755 is a MEDIUM (CVSS 6.4) vulnerability affecting converged security and management engine (intel), server platform services (intel).

Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.

Fix: update to 14.0.45, 12.0.70, e3_05.01.04.200, e5_04.01.04.400 or later.

Package

Affected versions

Patched versions

converged security and management engine

intel

≥ 14.0.0, < 14.0.45< 12.0.70

14.0.4512.0.70

server platform services

intel

< e3_05.01.04.200< e5_04.01.04.400

e3_05.01.04.200e5_04.01.04.400

More vulnerabilities in converged security and management engine

See all →