Aff Bios
Vendor:
First CVE: Nov 12, 2020 · Active for 5 years
10
Total CVEs
More Total CVEs than 88% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Aff Bios over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 12, 2020
5 years ago
Most Recent CVE
Jun 9, 2021
1,871 days ago
CVE Severity & Scoring
Aff Bios10 CVEs
80%
20%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local9 (90.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical1 (10.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (90.0%)
High1 (10.0%)
Unknown0 (0.0%)
User Interaction
None10 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (30.0%)
High6 (60.0%)
None1 (10.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-8739HIGH Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege | Nov 12, 2020 | 7.8 | 25 | NO | NO |
CVE-2020-8700MEDIUM Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.7 | 23 | NO | NO |
CVE-2020-8740MEDIUM Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 23 | NO | NO |
CVE-2020-8670MEDIUM Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.4 | 22 | NO | NO |
CVE-2020-8764MEDIUM Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 22 | NO | NO |
CVE-2020-24486MEDIUM Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. | Jun 9, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-12360HIGH Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 7.8 | 20 | NO | NO |
CVE-2020-12359MEDIUM Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical acces | Jun 9, 2021 | 6.8 | 18 | NO | NO |
CVE-2020-12357MEDIUM Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.7 | 18 | NO | NO |
CVE-2020-12358MEDIUM Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. | Jun 9, 2021 | 4.4 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Aff Bios
Top CWEs
Versions
No cataloged versions.