CVE-2020-0529
HIGHCVSS 7.8/10EPSS 0.34%
Last modified
CVE-2020-0529 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I5-7600k Firmware | All versions |
| Intel | Core I5-7600t Firmware | All versions |
| Intel | Core I5-7600 Firmware | All versions |
| Intel | Core I5-7500 Firmware | All versions |
| Intel | Core I5-7500t Firmware | All versions |
| Intel | Core I5-7442eq Firmware | All versions |
| Intel | Core I5-7440hq Firmware | All versions |
| Intel | Core I5-7440eq Firmware | All versions |
| Intel | Core I5-7400t Firmware | All versions |
| Intel | Core I5-7400 Firmware | All versions |
| Intel | Core I5-7360u Firmware | All versions |
| Intel | Core I5-7300u Firmware | All versions |
| Intel | Core I5-7300hq Firmware | All versions |
| Intel | Core I5-7287u Firmware | All versions |
| Intel | Core I5-7267u Firmware | All versions |
| Intel | Core I5-7260u Firmware | All versions |
| Intel | Core I5-7200u Firmware | All versions |
| Intel | Core I5-7y54 Firmware | All versions |
| Intel | Core I5-7y57 Firmware | All versions |
| Intel | Core I7-7920hq Firmware | All versions |
| Intel | Core I7-7820hq Firmware | All versions |
| Intel | Core I7-7820hk Firmware | All versions |
| Intel | Core I7-7820eq Firmware | All versions |
| Intel | Core I7-7700hq Firmware | All versions |
| Intel | Core I7-7700 Firmware | All versions |
| Intel | Core I7-7700k Firmware | All versions |
| Intel | Core I7-7700t Firmware | All versions |
| Intel | Core I7-7660u Firmware | All versions |
| Intel | Core I7-7600u Firmware | All versions |
| Intel | Core I7-7567u Firmware | All versions |
| Intel | Core I7-7560u Firmware | All versions |
| Intel | Core I7-7500u Firmware | All versions |
| Intel | Core I7-7y75 Firmware | All versions |
| Intel | Core I7-8665ue Firmware | All versions |
| Intel | Core I7-8665u Firmware | All versions |
| Intel | Core I7-8557u Firmware | All versions |
| Intel | Core I7-8850h Firmware | All versions |
| Intel | Core I7-8809g Firmware | All versions |
| Intel | Core I7-8750h Firmware | All versions |
| Intel | Core I7-8709g Firmware | All versions |
| Intel | Core I7-8706g Firmware | All versions |
| Intel | Core I7-8705g Firmware | All versions |
| Intel | Core I7-8700t Firmware | All versions |
| Intel | Core I7-8700k Firmware | All versions |
| Intel | Core I7-8700b Firmware | All versions |
| Intel | Core I7-8700 Firmware | All versions |
| Intel | Core I7\+8700 Firmware | All versions |
| Intel | Core I7-8569u Firmware | All versions |
| Intel | Core I7-8650u Firmware | All versions |
| Intel | Core I7-8565u Firmware | All versions |
Showing 50 of 79 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-0529?
Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2020-0529?
CVE-2020-0529 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2020-0529?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-0523Improper access control in the firmware for the Intel(R) Eth…4.4
- CVE-2020-0524Improper default permissions in the firmware for the Intel(R…5.5
- CVE-2020-0525Improper access control in firmware for the Intel(R) Etherne…4.4
- CVE-2020-0526Improper input validation in firmware for Intel(R) NUC may a…6.7
- CVE-2020-0527Insufficient control flow management in firmware for some In…4.4
- CVE-2020-0528Improper buffer restrictions in BIOS firmware for 7th, 8th, …7.8
- CVE-2020-0530Improper buffer restrictions in firmware for Intel(R) NUC ma…7.8
- CVE-2020-0531Improper input validation in Intel(R) AMT versions before 11…6.5
- CVE-2020-0532Improper input validation in subsystem for Intel(R) AMT vers…7.1
- CVE-2020-0533Reversible one-way hash in Intel(R) CSME versions before 11.…6.7
- CVE-2020-0534Improper input validation in the DAL subsystem for Intel(R) …7.5
- CVE-2020-0535Improper input validation in Intel(R) AMT versions before 11…5.3
Are you affected by CVE-2020-0529?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST