The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules arises from the lack of measures to protect input data. This allows attackers to exploit their privileges.

🗓️ 27 Oct 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 21 Views

Vulnerability in microprogramming on server boards and Intel modules due to unclean input data enabling remote privilege escalation.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2020-8723	13 Aug 202003:15	–	attackerkb
CVE	CVE-2020-8723	13 Aug 202002:53	–	cve
Cvelist	CVE-2020-8723	13 Aug 202002:53	–	cvelist
EUVD	EUVD-2020-29571	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	11 Aug 202000:00	–	intel
NVD	CVE-2020-8723	13 Aug 202003:15	–	nvd
OSV	CVE-2020-8723	13 Aug 202003:15	–	osv
Prion	Cross site scripting	13 Aug 202003:15	–	prion
Rapid7 Vulnerability Database (full)	CVE-2020-8723: Improper Neutralization of Input During Web Page Generation	13 Aug 202000:00	–	rapid7
RedhatCVE	CVE-2020-8723	22 May 202516:52	–	redhatcve

Vulners

Node

OR

intel intel_server_system_r1000wtRange<1.59

intel intel_server_system_r2000wtRange<1.59

intel intel_server_board_s2600wtRange<1.59

intel intel_server_board_s2600cwRange<1.59

intel intel_compute_module_hns2600kpRange<1.59

intel intel_server_board_s2600kpRange<1.59

intel intel_compute_module_hns2600tpRange<1.59

intel intel_server_board_s2600tpRange<1.59

intel intel_server_system_r1000spRange<1.59

intel intel_server_system_lsvrpRange<1.59

intel intel_server_system_lr1304spRange<1.59

intel intel_server_board_s1200spRange<1.59

intel intel_server_system_r1000wfRange<1.59

intel intel_server_system_r2000wfRange<1.59

intel intel_server_board_s2600wfRange<1.59

intel intel_server_board_s2600stRange<1.59

intel intel_compute_module_hns2600bpRange<1.59

intel intel_server_board_s2600bpRange<1.59

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8723
web	www.web.nvd.nist.gov/view/vuln/detail

27 Oct 2020 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

CVSS 35.4

EPSS0.00608

server boards server systems Intel computing modules microprogramming software unclean input data remote privilege escalation