Fas Bios
Vendor:
First CVE: Nov 12, 2020 · Active for 5 years
11
Total CVEs
More Total CVEs than 89% of tracked products
3.7
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Fas Bios over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 12, 2020
5 years ago
Most Recent CVE
May 12, 2022
1,536 days ago
CVE Severity & Scoring
Fas Bios11 CVEs
82%
18%
All CVEs352,713 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local10 (90.9%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical1 (9.1%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (90.9%)
High1 (9.1%)
Unknown0 (0.0%)
User Interaction
None11 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low4 (36.4%)
High6 (54.5%)
None1 (9.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-8739HIGH Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege | Nov 12, 2020 | 7.8 | 25 | NO | NO |
CVE-2020-8700MEDIUM Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.7 | 23 | NO | NO |
CVE-2020-8740MEDIUM Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 23 | NO | NO |
CVE-2020-8670MEDIUM Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.4 | 22 | NO | NO |
CVE-2020-8764MEDIUM Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Nov 12, 2020 | 6.7 | 22 | NO | NO |
CVE-2022-21151MEDIUM Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure v | May 12, 2022 | 5.5 | 20 | NO | NO |
CVE-2020-24486MEDIUM Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. | Jun 9, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-12360HIGH Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 7.8 | 20 | NO | NO |
CVE-2020-12359MEDIUM Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical acces | Jun 9, 2021 | 6.8 | 18 | NO | NO |
CVE-2020-12357MEDIUM Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Jun 9, 2021 | 6.7 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Fas Bios
Top CWEs
Versions
No cataloged versions.