Lucene search

[email protected]CVE-2020-8711

HistoryAug 13, 2020 - 3:15 a.m.

CVE-2020-8711

2020-08-1303:15:15

[email protected]

web.nvd.nist.gov

security

intel

access control

cve-2020-8711

privilege escalation

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper access control in the bootloader for some Intel® Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelserver_board_s2600wt_firmwareRange<2.45

AND

intelserver_board_s2600wt2Match-

intelserver_board_s2600wt2rMatch-

intelserver_board_s2600wttMatch-

intelserver_board_s2600wttrMatch-

Node

intelserver_system_r1000wt_firmwareRange<2.45

AND

intelserver_system_r1208wt2gsMatch-

intelserver_system_r1208wt2gsrMatch-

intelserver_system_r1208wttgsMatch-

intelserver_system_r1208wttgsbppMatch-

intelserver_system_r1208wttgsrMatch-

intelserver_system_r1304wt2gsMatch-

intelserver_system_r1304wt2gsrMatch-

intelserver_system_r1304wttgsMatch-

intelserver_system_r1304wttgsrMatch-

Node

intelserver_system_r2000wt_firmwareRange<2.45

AND

intelserver_system_r2208wt2ysMatch-

intelserver_system_r2208wt2ysrMatch-

intelserver_system_r2208wttyc1Match-

intelserver_system_r2208wttyc1rMatch-

intelserver_system_r2208wttysMatch-

intelserver_system_r2208wttysrMatch-

intelserver_system_r2224wttysMatch-

intelserver_system_r2224wttysrMatch-

intelserver_system_r2308wttysMatch-

intelserver_system_r2308wttysrMatch-

intelserver_system_r2312wttysMatch-

intelserver_system_r2312wttysrMatch-

Node

intelserver_board_s2600cwRange<2.45

AND

intelserver_board_s2600cw2Match-

intelserver_board_s2600cw2rMatch-

intelserver_board_s2600cw2sMatch-

intelserver_board_s2600cw2srMatch-

intelserver_board_s2600cwtMatch-

intelserver_board_s2600cwtrMatch-

intelserver_board_s2600cwtsMatch-

intelserver_board_s2600cwtsrMatch-

Node

intelcompute_module_hns2600kp_firmwareRange<2.45

AND

intelcompute_module_hns2600kpMatch-

intelcompute_module_hns2600kpfMatch-

intelcompute_module_hns2600kpfrMatch-

intelcompute_module_hns2600kprMatch-

Node

intelserver_board_s2600kp_firmwareRange<2.45

AND

intelserver_board_s2600kpMatch-

intelserver_board_s2600kpfMatch-

intelserver_board_s2600kpfrMatch-

intelserver_board_s2600kprMatch-

intelserver_board_s2600kptrMatch-

Node

intelcompute_module_hns2600tp_firmwareRange<2.45

AND

intelcompute_module_hns2600tpMatch-

intelcompute_module_hns2600tp24rMatch-

intelcompute_module_hns2600tp24srMatch-

intelcompute_module_hns2600tpfMatch-

intelcompute_module_hns2600tpfrMatch-

intelcompute_module_hns2600tprMatch-

Node

intelcompute_module_s2600tp_firmwareRange<2.45

AND

intelserver_board_s2600tpMatch-

intelserver_board_s2600tpfMatch-

intelserver_board_s2600tpfrMatch-

intelserver_board_s2600tprMatch-

Node

intelserver_board_s1200sp_firmwareRange<2.45

AND

intelserver_board_s1200splMatch-

intelserver_board_s1200splrMatch-

intelserver_board_s1200spoMatch-

intelserver_board_s1200sporMatch-

intelserver_board_s1200spsMatch-

intelserver_board_s1200spsrMatch-

Node

intelserver_system_lr1304sp_firmwareRange<2.45

AND

intelserver_system_lr1304spcfg1Match-

intelserver_system_lr1304spcfg1rMatch-

intelserver_system_lr1304spcfsgx1Match-

Node

intelserver_system_lsvrp_firmwareRange<2.45

AND

intelserver_system_lsvrp4304es6xx1Match-

intelserver_system_lsvrp4304es6xxrMatch-

Node

intelserver_system_r1000sp_firmwareRange<2.45

AND

intelserver_system_r1208sposhorMatch-

intelserver_system_r1208sposhorrMatch-

intelserver_system_r1304sposhbnMatch-

intelserver_system_r1304sposhbnrMatch-

intelserver_system_r1304sposhorMatch-

intelserver_system_r1304sposhorrMatch-

Node

intelserver_board_s2600wf_firmwareRange<2.45

AND

intelserver_board_s2600wf0Match-

intelserver_board_s2600wf0rMatch-

intelserver_board_s2600wfqMatch-

intelserver_board_s2600wfqrMatch-

intelserver_board_s2600wftMatch-

intelserver_board_s2600wftrMatch-

Node

intelserver_system_r1000wf_firmwareRange<2.45

AND

intelserver_system_lnetcnt3yMatch-

intelserver_system_mcb2208wfaf4Match-

intelserver_system_mcb2208wfaf5Match-

intelserver_system_mcb2208wfaf6Match-

intelserver_system_mcb2208wfhy2Match-

intelserver_system_nb2208wfqnfviMatch-

intelserver_system_r1208wfqysrMatch-

intelserver_system_r1208wftysMatch-

intelserver_system_r1208wftysrMatch-

intelserver_system_r1304wf0ysMatch-

intelserver_system_r1304wf0ysrMatch-

intelserver_system_r1304wftysMatch-

intelserver_system_r1304wftysrMatch-

Node

intelserver_system_r2000wf_firmwareRange<2.45

AND

intelserver_system_r2208wf0zsMatch-

intelserver_system_r2208wf0zsrMatch-

intelserver_system_r2208wfqzsMatch-

intelserver_system_r2208wfqzsrMatch-

intelserver_system_r2208wftzsMatch-

intelserver_system_r2208wftzsrMatch-

intelserver_system_r2224wfqzsMatch-

intelserver_system_r2224wftzsMatch-

intelserver_system_r2224wftzsrMatch-

intelserver_system_r2308wftzsMatch-

intelserver_system_r2308wftzsrMatch-

intelserver_system_r2312wf0npMatch-

intelserver_system_r2312wf0nprMatch-

intelserver_system_r2312wfqzsMatch-

intelserver_system_r2312wftzsMatch-

intelserver_system_r2312wftzsrMatch-

intelserver_system_vrn2208waf6Match-

intelserver_system_vrn2208wfaf81Match-

intelserver_system_vrn2208wfaf82Match-

intelserver_system_vrn2208wfaf83Match-

intelserver_system_vrn2208wfhy6Match-

Node

intelserver_board_s2600st_firmwareRange<2.45

AND

intelserver_board_s2600stbMatch-

intelserver_board_s2600stbrMatch-

intelserver_board_s2600stqMatch-

intelserver_board_s2600stqrMatch-

Node

intelcompute_module_hns2600bp_firmwareRange<2.45

AND

intelcompute_module_hns2600bpbMatch-

intelcompute_module_hns2600bpb24Match-

intelcompute_module_hns2600bpb24rMatch-

intelcompute_module_hns2600bpblcMatch-

intelcompute_module_hns2600bpblc24Match-

intelcompute_module_hns2600bpblc24rMatch-

intelcompute_module_hns2600bpblcrMatch-

intelcompute_module_hns2600bpbrMatch-

intelcompute_module_hns2600bpqMatch-

intelcompute_module_hns2600bpq24Match-

intelcompute_module_hns2600bpq24rMatch-

intelcompute_module_hns2600bpqrMatch-

intelcompute_module_hns2600bpsMatch-

intelcompute_module_hns2600bps24Match-

intelcompute_module_hns2600bps24rMatch-

intelcompute_module_hns2600bpsrMatch-

Node

intelserver_board_s2600bp_firmwareRange<2.45

AND

intelserver_board_s2600bpbMatch-

intelserver_board_s2600bpbrMatch-

intelserver_board_s2600bpqMatch-

intelserver_board_s2600bpqrMatch-

intelserver_board_s2600bpsMatch-

intelserver_board_s2600bpsrMatch-

CPENameOperatorVersion
intel:server_board_s2600wt_firmwareintel server board s2600wt firmwarelt2.45

CPE	Name	Operator	Version
intel:server_board_s2600wt_firmware	intel server board s2600wt firmware	lt	2.45

CNA Affected

[
  {
    "product": "Intel(R) Server Boards, Server Systems and Compute Modules Advisory",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Before version 2.45"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20200814-0002/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2020-8711

nvd1 prion1 cvelist1 intel1