CVE-2020-8698
hw: Fast forward store predictor
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Un aislamiento inapropiado de los recursos compartidos en algunos Intel® Processors, puede habilitar a un usuario autenticado para permitir potencialmente una divulgación de información por medio de un acceso local
A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-02-06 CVE Reserved
- 2020-11-11 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-668: Exposure of Resource to Wrong Sphere
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf | Third Party Advisory |
|
| https://lists.debian.org/debian-lts-announce/2021/02/msg00007.html | Mailing List |
|
| https://security.netapp.com/advisory/ntap-20201113-0006 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1000g1 Search vendor "Intel" for product "Core I3-1000g1" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1000g4 Search vendor "Intel" for product "Core I3-1000g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1005g1 Search vendor "Intel" for product "Core I3-1005g1" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1110g4 Search vendor "Intel" for product "Core I3-1110g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1115g4 Search vendor "Intel" for product "Core I3-1115g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1120g4 Search vendor "Intel" for product "Core I3-1120g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I3-1125g4 Search vendor "Intel" for product "Core I3-1125g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1030g4 Search vendor "Intel" for product "Core I5-1030g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1030g7 Search vendor "Intel" for product "Core I5-1030g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1035g1 Search vendor "Intel" for product "Core I5-1035g1" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1035g4 Search vendor "Intel" for product "Core I5-1035g4" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1035g7 Search vendor "Intel" for product "Core I5-1035g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1130g7 Search vendor "Intel" for product "Core I5-1130g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I5-1135g7 Search vendor "Intel" for product "Core I5-1135g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I7-1060g7 Search vendor "Intel" for product "Core I7-1060g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I7-1065g7 Search vendor "Intel" for product "Core I7-1065g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I7-1160g7 Search vendor "Intel" for product "Core I7-1160g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I7-1165g7 Search vendor "Intel" for product "Core I7-1165g7" | - | - |
Safe
|
| Intel Search vendor "Intel" | Microcode Search vendor "Intel" for product "Microcode" | - | - |
Affected
| in | Intel Search vendor "Intel" | Core I7-1185g7 Search vendor "Intel" for product "Core I7-1185g7" | - | - |
Safe
|
| Netapp Search vendor "Netapp" | Hci Compute Node Bios Search vendor "Netapp" for product "Hci Compute Node Bios" | - | - |
Affected
| in | Netapp Search vendor "Netapp" | Hci Compute Node Search vendor "Netapp" for product "Hci Compute Node" | - | - |
Safe
|
| Netapp Search vendor "Netapp" | Hci Storage Node Bios Search vendor "Netapp" for product "Hci Storage Node Bios" | - | - |
Affected
| in | Netapp Search vendor "Netapp" | Hci Storage Node Search vendor "Netapp" for product "Hci Storage Node" | - | - |
Safe
|
| Netapp Search vendor "Netapp" | Solidfire Bios Search vendor "Netapp" for product "Solidfire Bios" | - | - |
Affected
| in | Netapp Search vendor "Netapp" | Solidfire Search vendor "Netapp" for product "Solidfire" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Field Pg M5 Firmware Search vendor "Siemens" for product "Simatic Field Pg M5 Firmware" | < 22.01.08 Search vendor "Siemens" for product "Simatic Field Pg M5 Firmware" and version " < 22.01.08" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Field Pg M5 Search vendor "Siemens" for product "Simatic Field Pg M5" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Field Pg M6 Firmware Search vendor "Siemens" for product "Simatic Field Pg M6 Firmware" | * | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Field Pg M6 Search vendor "Siemens" for product "Simatic Field Pg M6" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc427e Firmware Search vendor "Siemens" for product "Simatic Ipc427e Firmware" | < 21.01.15 Search vendor "Siemens" for product "Simatic Ipc427e Firmware" and version " < 21.01.15" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc427e Search vendor "Siemens" for product "Simatic Ipc427e" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc477e Firmware Search vendor "Siemens" for product "Simatic Ipc477e Firmware" | < 21.01.15 Search vendor "Siemens" for product "Simatic Ipc477e Firmware" and version " < 21.01.15" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc477e Search vendor "Siemens" for product "Simatic Ipc477e" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc477e Pro Firmware Search vendor "Siemens" for product "Simatic Ipc477e Pro Firmware" | < 21.01.15 Search vendor "Siemens" for product "Simatic Ipc477e Pro Firmware" and version " < 21.01.15" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc477e Pro Search vendor "Siemens" for product "Simatic Ipc477e Pro" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc627e Firmware Search vendor "Siemens" for product "Simatic Ipc627e Firmware" | < 25.02.08 Search vendor "Siemens" for product "Simatic Ipc627e Firmware" and version " < 25.02.08" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc627e Search vendor "Siemens" for product "Simatic Ipc627e" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc647e Firmware Search vendor "Siemens" for product "Simatic Ipc647e Firmware" | < 25.02.08 Search vendor "Siemens" for product "Simatic Ipc647e Firmware" and version " < 25.02.08" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc647e Search vendor "Siemens" for product "Simatic Ipc647e" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc677e Firmware Search vendor "Siemens" for product "Simatic Ipc677e Firmware" | < 25.02.08 Search vendor "Siemens" for product "Simatic Ipc677e Firmware" and version " < 25.02.08" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc677e Search vendor "Siemens" for product "Simatic Ipc677e" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Ipc847e Firmware Search vendor "Siemens" for product "Simatic Ipc847e Firmware" | < 25.02.08 Search vendor "Siemens" for product "Simatic Ipc847e Firmware" and version " < 25.02.08" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Ipc847e Search vendor "Siemens" for product "Simatic Ipc847e" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Itp1000 Firmware Search vendor "Siemens" for product "Simatic Itp1000 Firmware" | < 23.01.08 Search vendor "Siemens" for product "Simatic Itp1000 Firmware" and version " < 23.01.08" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itp1000 Search vendor "Siemens" for product "Simatic Itp1000" | - | - |
Safe
|
| Netapp Search vendor "Netapp" | Clustered Data Ontap Search vendor "Netapp" for product "Clustered Data Ontap" | - | - |
Affected
| ||||||
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 31 Search vendor "Fedoraproject" for product "Fedora" and version "31" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||