CVE-2020-8694
MEDIUMCVSS 5.5/10EPSS 0.45%
Last modified
CVE-2020-8694 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I7-8510y Firmware | All versions |
| Intel | Core I7-8500y Firmware | All versions |
| Intel | Core I5-8310y Firmware | All versions |
| Intel | Core I5-8210y Firmware | All versions |
| Intel | Core I5-8200y Firmware | All versions |
| Intel | Core M3-8100y Firmware | All versions |
| Intel | Core I7-7500u Firmware | All versions |
| Intel | Core I7-7510u Firmware | All versions |
| Intel | Core I7-7600u Firmware | All versions |
| Intel | Core I5-7200u Firmware | All versions |
| Intel | Core I5-7210u Firmware | All versions |
| Intel | Core I5-7300u Firmware | All versions |
| Intel | Core I5-7500u Firmware | All versions |
| Intel | Core I3-7007u Firmware | All versions |
| Intel | Core I3-7100u Firmware | All versions |
| Intel | Core I3-7110u Firmware | All versions |
| Intel | Core I3-7130u Firmware | All versions |
| Intel | Pentium 4415u Firmware | All versions |
| Intel | Celeron 3865u Firmware | All versions |
| Intel | Celeron 3965u Firmware | All versions |
| Intel | Core I7-7560u Firmware | All versions |
| Intel | Core I7-7567u Firmware | All versions |
| Intel | Core I7-7660u Firmware | All versions |
| Intel | Core I5-7260u Firmware | All versions |
| Intel | Core I5-7267u Firmware | All versions |
| Intel | Core I5-7287u Firmware | All versions |
| Intel | Core I5-7360u Firmware | All versions |
| Intel | Core I3-7367u Firmware | All versions |
| Intel | Core I7-7y75 Firmware | All versions |
| Intel | Core I5-7y54 Firmware | All versions |
| Intel | Core I5-7y57 Firmware | All versions |
| Intel | Core M3-7y30 Firmware | All versions |
| Intel | Pentium 4410y Firmware | All versions |
| Intel | Pentium 4415y Firmware | All versions |
| Intel | Celeron 3965y Firmware | All versions |
| Intel | Core I7-8565u Firmware | All versions |
| Intel | Core I7-8665u Firmware | All versions |
| Intel | Core I5-8365u Firmware | All versions |
| Intel | Core I5-8265u Firmware | All versions |
| Intel | Core I9-8950hk Firmware | All versions |
| Intel | Core I7-8700b Firmware | All versions |
| Intel | Core I7-8750h Firmware | All versions |
| Intel | Core I7-8850h Firmware | All versions |
| Intel | Core I5-8300h Firmware | All versions |
| Intel | Core I5-8400b Firmware | All versions |
| Intel | Core I5-8400h Firmware | All versions |
| Intel | Core I5-8500b Firmware | All versions |
| Intel | Core I7-8670 Firmware | All versions |
| Intel | Core I7-8670t Firmware | All versions |
| Intel | Core I7-8700 Firmware | All versions |
Showing 50 of 299 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-8694?
Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
How severe is CVE-2020-8694?
CVE-2020-8694 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.45% probability of exploitation in the next 30 days.
How do I fix CVE-2020-8694?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-8688Improper input validation in the Intel(R) RAID Web Console 3…7.5
- CVE-2020-8689Improper buffer restrictions in the Intel(R) Wireless for Op…6.5
- CVE-2020-8690Protection mechanism failure in Intel(R) Ethernet 700 Series…6.7
- CVE-2020-8691A logic issue in the firmware of the Intel(R) Ethernet 700 S…6.7
- CVE-2020-8692Insufficient access control in the firmware of the Intel(R) …6.7
- CVE-2020-8693Improper buffer restrictions in the firmware of the Intel(R)…6.7
- CVE-2020-8695Observable discrepancy in the RAPL interface for some Intel(…5.5
- CVE-2020-8696Improper removal of sensitive information before storage or …5.5
- CVE-2020-8697Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-8698Improper isolation of shared resources in some Intel(R) Proc…5.5
- CVE-2020-8699Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-8700Improper input validation in the firmware for some Intel(R) …6.7
Are you affected by CVE-2020-8694?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST