CVE-2020-24457
HIGHCVSS 7.6/10EPSS 0.39%
Last modified
CVE-2020-24457 is a high-severity vulnerability rated 7.6/10 on the CVSS scale. Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I7-8665ue Firmware | All versions |
| Intel | Core I7-8665u Firmware | All versions |
| Intel | Core I7-8557u Firmware | All versions |
| Intel | Core I7-8850h Firmware | All versions |
| Intel | Core I7-8809g Firmware | All versions |
| Intel | Core I7-8750h Firmware | All versions |
| Intel | Core I7-8709g Firmware | All versions |
| Intel | Core I7-8706g Firmware | All versions |
| Intel | Core I7-8705g Firmware | All versions |
| Intel | Core I7-8700t Firmware | All versions |
| Intel | Core I7-8700k Firmware | All versions |
| Intel | Core I7-8700b Firmware | All versions |
| Intel | Core I7-8700 Firmware | All versions |
| Intel | Core I7\+8700 Firmware | All versions |
| Intel | Core I7-8569u Firmware | All versions |
| Intel | Core I7-8650u Firmware | All versions |
| Intel | Core I7-8565u Firmware | All versions |
| Intel | Core I7-8559u Firmware | All versions |
| Intel | Core I7-8550u Firmware | All versions |
| Intel | Core I7-8500y Firmware | All versions |
| Intel | Core I7-8086k Firmware | All versions |
| Intel | Core I9-9980hk Firmware | All versions |
| Intel | Core I9-9880h Firmware | All versions |
| Intel | Core I9-9900t Firmware | All versions |
| Intel | Core I9-9900ks Firmware | All versions |
| Intel | Core I9-9900kf Firmware | All versions |
| Intel | Core I9-9900k Firmware | All versions |
| Intel | Core I9-9900 Firmware | All versions |
| Intel | Core I7-10875h Firmware | All versions |
| Intel | Core I7-10870h Firmware | All versions |
| Intel | Core I7-10850h Firmware | All versions |
| Intel | Core I7-10810u Firmware | All versions |
| Intel | Core I7-10750h Firmware | All versions |
| Intel | Core I7-10710u Firmware | All versions |
| Intel | Core I7-10700te Firmware | All versions |
| Intel | Core I7-10700t Firmware | All versions |
| Intel | Core I7-10700kf Firmware | All versions |
| Intel | Core I7-10700k Firmware | All versions |
| Intel | Core I7-10700f Firmware | All versions |
| Intel | Core I7-10700e Firmware | All versions |
| Intel | Core I7-10700 Firmware | All versions |
| Intel | Core I7-1065g7 Firmware | All versions |
| Intel | Core I7-10610u Firmware | All versions |
| Intel | Core I7-1060g7 Firmware | All versions |
| Intel | Core I7-1068ng7 Firmware | All versions |
| Intel | Core I7-10510u Firmware | All versions |
| Intel | Core I7-10510y Firmware | All versions |
| Intel | Pentium Silver N5000 Firmware | All versions |
| Intel | Pentium Silver J5040 Firmware | All versions |
| Intel | Pentium Silver J5005 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-24457?
Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
How severe is CVE-2020-24457?
CVE-2020-24457 has a CVSS score of 7.6/10 (HIGH severity). The EPSS model estimates a 0.39% probability of exploitation in the next 30 days.
How do I fix CVE-2020-24457?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-24451Uncontrolled search path in the Intel(R) Optane(TM) DC Persi…7.3
- CVE-2020-24452Improper input validation in the Intel(R) SGX Platform Softw…5.5
- CVE-2020-24453Improper input validation in the Intel(R) EPID SDK before ve…7.8
- CVE-2020-24454Improper Restriction of XML External Entity Reference in sub…7.5
- CVE-2020-24455Missing initialization of a variable in the TPM2 source may …6.7
- CVE-2020-24456Incorrect default permissions in the Intel(R) Board ID Tool …7.8
- CVE-2020-24458Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and…5.2
- CVE-2020-24459Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-24460Incorrect default permissions in the Intel(R) DSA before ver…5.5
- CVE-2020-24461Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-24462Out of bounds write in the Intel(R) Graphics Driver before v…7.8
- CVE-2020-24463Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2020-24457?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST