The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules arises from copying buffers without checking the size of the input data. This allows attackers to exploit their privileges.

🗓️ 07 Oct 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Unchecked buffer size in server software and Intel modules enables remote privilege escalation.

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2020-8707	13 Aug 202002:27	–	cve
Cvelist	CVE-2020-8707	13 Aug 202002:27	–	cvelist
EUVD	EUVD-2020-29555	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	11 Aug 202000:00	–	intel
NVD	CVE-2020-8707	13 Aug 202003:15	–	nvd
OSV	CVE-2020-8707	13 Aug 202003:15	–	osv
Prion	Buffer overflow	13 Aug 202003:15	–	prion
RedhatCVE	CVE-2020-8707	22 May 202515:42	–	redhatcve
ThreatPost	Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules	11 Aug 202020:02	–	threatpost

Vulners

Node

intel intel_server_system_r1000wtRange<1.59

OR

intel intel_server_system_r2000wtRange<1.59

OR

intel intel_server_board_s2600wtRange<1.59

OR

intel intel_server_board_s2600cwRange<1.59

OR

intel intel_compute_module_hns2600kpRange<1.59

OR

intel intel_server_board_s2600kpRange<1.59

OR

intel intel_compute_module_hns2600tpRange<1.59

OR

intel intel_server_board_s2600tpRange<1.59

OR

intel intel_server_system_r1000spRange<1.59

OR

intel intel_server_system_lsvrpRange<1.59

OR

intel intel_server_system_lr1304spRange<1.59

OR

intel intel_server_board_s1200spRange<1.59

OR

intel intel_server_system_r1000wfRange<1.59

OR

intel intel_server_system_r2000wfRange<1.59

OR

intel intel_server_board_s2600wfRange<1.59

OR

intel intel_server_board_s2600stRange<1.59

OR

intel intel_compute_module_hns2600bpRange<1.59

OR

intel intel_server_board_s2600bpRange<1.59

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8707
web	www.web.nvd.nist.gov/view/vuln/detail

07 Oct 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 26.8

CVSS 38.3

EPSS0.00168

unchecked buffer server software intel modules remote privilege escalation