Vulnerability of microprogramming software in server boards, server systems, and Intel computing modules, related to improper assignment of permissions for files, allowing attackers to increase their privileges

🗓️ 07 Oct 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Flaw in microprogramming software on servers and Intel modules allows privilege escalation via file permissions.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2020-8731	13 Aug 202002:26	–	cve
Cvelist	CVE-2020-8731	13 Aug 202002:26	–	cvelist
EUVD	EUVD-2020-29579	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	11 Aug 202000:00	–	intel
NVD	CVE-2020-8731	13 Aug 202003:15	–	nvd
Prion	Privilege escalation	13 Aug 202003:15	–	prion
RedhatCVE	CVE-2020-8731	22 May 202517:13	–	redhatcve
ThreatPost	Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules	11 Aug 202020:02	–	threatpost

Vulners

Node

intel intel_server_system_r1000wtRange<1.59

OR

intel intel_server_system_r2000wtRange<1.59

OR

intel intel_server_board_s2600wtRange<1.59

OR

intel intel_server_board_s2600cwRange<1.59

OR

intel intel_compute_module_hns2600kpRange<1.59

OR

intel intel_server_board_s2600kpRange<1.59

OR

intel intel_compute_module_hns2600tpRange<1.59

OR

intel intel_server_board_s2600tpRange<1.59

OR

intel intel_server_system_r1000spRange<1.59

OR

intel intel_server_system_lsvrpRange<1.59

OR

intel intel_server_system_lr1304spRange<1.59

OR

intel intel_server_board_s1200spRange<1.59

OR

intel intel_server_system_r1000wfRange<1.59

OR

intel intel_server_system_r2000wfRange<1.59

OR

intel intel_server_board_s2600wfRange<1.59

OR

intel intel_server_board_s2600stRange<1.59

OR

intel intel_compute_module_hns2600bpRange<1.59

OR

intel intel_server_board_s2600bpRange<1.59

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8731
web	www.web.nvd.nist.gov/view/vuln/detail

07 Oct 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 26.8

CVSS 38.8

EPSS0.0004

microprogramming software server boards Intel modules improper file permissions privilege escalation