The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules arises from copying buffers without checking the size of the input data. This allows attackers to exploit their privileges.

🗓️ 27 Oct 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 25 Views

Buffer copy without size checks in microprogrammed software on servers may enable privilege gain.

Reporter	Title	Published	Views	Family All 11
attackerkb	CVE-2020-8712	13 Aug 202003:15	–	attackerkb
CVE	CVE-2020-8712	13 Aug 202002:42	–	cve
Cvelist	CVE-2020-8712	13 Aug 202002:42	–	cvelist
EUVD	EUVD-2020-29560	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	11 Aug 202000:00	–	intel
NVD	CVE-2020-8712	13 Aug 202003:15	–	nvd
OSV	CVE-2020-8712	13 Aug 202003:15	–	osv
Prion	Buffer overflow	13 Aug 202003:15	–	prion
Positive Technologies	PT-2020-4344	11 Aug 202000:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2020-8712: Buffer Copy without Checking Size of Input	13 Aug 202000:00	–	rapid7

Vulners

Node

OR

intel intel_server_system_r1000wtRange<1.59

intel intel_server_system_r2000wtRange<1.59

intel intel_server_board_s2600wtRange<1.59

intel intel_server_board_s2600cwRange<1.59

intel intel_compute_module_hns2600kpRange<1.59

intel intel_server_board_s2600kpRange<1.59

intel intel_compute_module_hns2600tpRange<1.59

intel intel_server_board_s2600tpRange<1.59

intel intel_server_system_r1000spRange<1.59

intel intel_server_system_lsvrpRange<1.59

intel intel_server_system_lr1304spRange<1.59

intel intel_server_board_s1200spRange<1.59

intel intel_server_system_r1000wfRange<1.59

intel intel_server_system_r2000wfRange<1.59

intel intel_server_board_s2600wfRange<1.59

intel intel_server_board_s2600stRange<1.59

intel intel_compute_module_hns2600bpRange<1.59

intel intel_server_board_s2600bpRange<1.59

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8712
web	www.web.nvd.nist.gov/view/vuln/detail

27 Oct 2020 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 37.8

EPSS0.00365

buffer copy size checks microprogrammed software servers Intel computing modules