CVE-2020-8704: Intel Local Manageability Service

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Local Manageability Service: before 2039.1.0.0 (fixed in 2039.1.0.0)
• Siemens SIMATIC Field Pg m5 Firmware: any version
• Siemens SIMATIC Field Pg m6 Firmware: any version
• Siemens SIMATIC IPC427E Firmware: any version
• Siemens SIMATIC IPC477E Firmware: any version
• Siemens SIMATIC IPC477E Pro Firmware: any version
• Siemens SIMATIC IPC527G Firmware: any version
• Siemens SIMATIC IPC547G Firmware: any version
• Siemens SIMATIC IPC627E Firmware: before 25.02.10 (fixed in 25.02.10)
• Siemens SIMATIC IPC647E Firmware: before 25.02.10 (fixed in 25.02.10)
• Siemens SIMATIC IPC677E Firmware: before 25.02.10 (fixed in 25.02.10)
• Siemens SIMATIC IPC847E Firmware: before 25.02.10 (fixed in 25.02.10)
• Siemens SIMATIC ITP1000 Firmware: any version

Published 2021-06-09. Last modified 2026-06-17.