CVE-2020-8705: Intel Converged Security And Manageability Engine

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 3.1.80 and 4.0.30, Intel(R) SPS versions before E5_04.01.04.400, E3_04.01.04.200, SoC-X_04.00.04.200 and SoC-A_04.00.04.300 may allow an unauthenticated user to potentially enable escalation of privileges via physical access.

Affected products

• Intel Converged Security And Manageability Engine: before 11.8.80 (fixed in 11.8.80); from 11.12.0, before 11.12.80 (fixed in 11.12.80); from 11.22.0, before 11.22.80 (fixed in 11.22.80); from 12.0, before 12.0.70 (fixed in 12.0.70); from 13.0, before 13.0.40 (fixed in 13.0.40); from 13.30.0, before 13.30.10 (fixed in 13.30.10); …
• Intel Server Platform Services: version sps_e3_04.01.04.200 only; version sps_e5_04.01.04.400 only; version sps_soc-a_04.00.04.300 only; version sps_soc-x_04.00.04.200 only
• Intel Trusted Execution Technology: version 3.1.80 only; version 4.0.30 only

Published 2020-11-12. Last modified 2026-06-17.