The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

🗓️ 27 Oct 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 19 Views

Authentication flaws in microprogrammed software and socket services on servers and Intel modules enable privilege escalation.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2020-8714	13 Aug 202003:15	–	attackerkb
CVE	CVE-2020-8714	13 Aug 202003:00	–	cve
Cvelist	CVE-2020-8714	13 Aug 202003:00	–	cvelist
EUVD	EUVD-2020-29562	7 Oct 202500:30	–	euvd
NVD	CVE-2020-8714	13 Aug 202003:15	–	nvd
OSV	CVE-2020-8714	13 Aug 202003:15	–	osv
Prion	Authentication flaw	13 Aug 202003:15	–	prion
Positive Technologies	PT-2020-4365	11 Aug 202000:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2020-8714: Improper Authentication	13 Aug 202000:00	–	rapid7
RedhatCVE	CVE-2020-8714	22 May 202516:52	–	redhatcve

Vulners

Node

OR

intel intel_server_system_r1000wtRange<1.59

intel intel_server_system_r2000wtRange<1.59

intel intel_server_board_s2600wtRange<1.59

intel intel_server_board_s2600cwRange<1.59

intel intel_compute_module_hns2600kpRange<1.59

intel intel_server_board_s2600kpRange<1.59

intel intel_compute_module_hns2600tpRange<1.59

intel intel_server_board_s2600tpRange<1.59

intel intel_server_system_r1000spRange<1.59

intel intel_server_system_lsvrpRange<1.59

intel intel_server_system_lr1304spRange<1.59

intel intel_server_board_s1200spRange<1.59

intel intel_server_system_r1000wfRange<1.59

intel intel_server_system_r2000wfRange<1.59

intel intel_server_board_s2600wfRange<1.59

intel intel_server_board_s2600stRange<1.59

intel intel_compute_module_hns2600bpRange<1.59

intel intel_server_board_s2600bpRange<1.59

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8714
web	www.web.nvd.nist.gov/view/vuln/detail

27 Oct 2020 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 21.7

CVSS 33.8

EPSS0.00332

authentication flaws microprogrammed software socket services server boards server systems Intel computing modules privilege escalation