CVE-2020-0592
CVE-2020-0592 is a medium-severity vulnerability in Intel Bios with a CVSS 3.x base score of 6.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-787.
Key facts
- Severity: Medium (CVSS 3.x base score 6.7)
- CVSS v2: 4.6
- EPSS exploit prediction: 0% (26th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-787
- Affected product: Intel Bios
- Published:
- Last modified:
Description
Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
Frequently asked questions
- What is CVE-2020-0592?
- Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
- How severe is CVE-2020-0592?
- CVE-2020-0592 has a CVSS 3.x base score of 6.7, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2020-0592 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2020-0592?
- CVE-2020-0592 affects Intel Bios. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2020-0592?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2020-0592 published?
- CVE-2020-0592 was published on 2020-11-12 and last updated on 2026-06-17.
References
- https://security.netapp.com/advisory/ntap-20201113-0001/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358
Affected products (1)
- cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:*
More vulnerabilities in Intel Bios
- CVE-2019-14557 — High (CVSS 8.0): Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 &…
- CVE-2020-12360 — High (CVSS 7.8): Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable…
- CVE-2020-8672 — High (CVSS 7.8): Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series…
- CVE-2020-8739 — High (CVSS 7.8): Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an…
- CVE-2018-3612 — High (CVSS 7.8): Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate…
- CVE-2008-7096 — Medium (CVSS 6.9): Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW,…
All CVEs affecting Intel Bios →
Other CWE-787 (Out-of-bounds Write) vulnerabilities
- CVE-2026-42369 — Critical (CVSS 10.0): GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other…
- CVE-2026-4746 — Critical (CVSS 10.0): Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src modules). This vulnerability is…
- CVE-2025-43300 — Critical (CVSS 10.0): An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS…
- CVE-2025-24201 — Critical (CVSS 10.0): An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…
- CVE-2024-42479 — Critical (CVSS 10.0): llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause…
- CVE-2024-39791 — Critical (CVSS 10.0): Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge…