CVEvulnerability

CVE-2020-8712

7.8 HIGH Published 2020-08-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-120

Description

Buffer overflow in a verification process for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

• intel server board s2600wt firmware (< 2.45) • intel server system r1000wt firmware (< 2.45) • intel server system r2000wt firmware (< 2.45) • intel server board s2600cw (< 2.45) • intel compute module hns2600kp firmware (< 2.45) • intel server board s2600kp firmware (< 2.45) • intel compute module hns2600tp firmware (< 2.45) • intel compute module s2600tp firmware (< 2.45) • intel server board s1200sp firmware (< 2.45) • intel server system lr1304sp firmware (< 2.45) • intel server system lsvrp firmware (< 2.45) • intel server system r1000sp firmware (< 2.45) • intel server board s2600wf firmware (< 2.45) • intel server system r1000wf firmware (< 2.45) • intel server system r2000wf firmware (< 2.45) • intel server board s2600st firmware (< 2.45) • intel compute module hns2600bp firmware (< 2.45) • intel server board s2600bp firmware (< 2.45)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References