The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules arises from copying buffers without checking the size of the input data. This allows attackers to exploit their privileges.

🗓️ 27 Oct 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 23 Views

Unchecked buffer sizes in microprogrammed software on server boards, systems, and Intel modules enable privilege escalation.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2020-8720	13 Aug 202004:15	–	attackerkb
CVE	CVE-2020-8720	13 Aug 202003:11	–	cve
Cvelist	CVE-2020-8720	13 Aug 202003:11	–	cvelist
EUVD	EUVD-2020-29568	7 Oct 202500:30	–	euvd
NVD	CVE-2020-8720	13 Aug 202004:15	–	nvd
OSV	CVE-2020-8720	13 Aug 202004:15	–	osv
Prion	Buffer overflow	13 Aug 202004:15	–	prion
Positive Technologies	PT-2020-4363	11 Aug 202000:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2020-8720: Buffer Copy without Checking Size of Input	13 Aug 202000:00	–	rapid7
RedhatCVE	CVE-2020-8720	22 May 202517:09	–	redhatcve

Vulners

Node

OR

intel intel_server_system_r1000wtRange<1.59

intel intel_server_system_r2000wtRange<1.59

intel intel_server_board_s2600wtRange<1.59

intel intel_server_board_s2600cwRange<1.59

intel intel_compute_module_hns2600kpRange<1.59

intel intel_server_board_s2600kpRange<1.59

intel intel_compute_module_hns2600tpRange<1.59

intel intel_server_board_s2600tpRange<1.59

intel intel_server_system_r1000spRange<1.59

intel intel_server_system_lsvrpRange<1.59

intel intel_server_system_lr1304spRange<1.59

intel intel_server_board_s1200spRange<1.59

intel intel_server_system_r1000wfRange<1.59

intel intel_server_system_r2000wfRange<1.59

intel intel_server_board_s2600wfRange<1.59

intel intel_server_board_s2600stRange<1.59

intel intel_compute_module_hns2600bpRange<1.59

intel intel_server_board_s2600bpRange<1.59

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8720
web	www.web.nvd.nist.gov/view/vuln/detail

27 Oct 2020 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 21.7

CVSS 32.3

EPSS0.00327

buffer size unchecked microprogrammed software server boards server systems Intel modules privilege escalation