Lucene search
HpeCVELIST:CVE-2020-7207HistoryNov 05, 2020 - 8:14 p.m.
CVE-2020-7207
2020-11-0520:14:32
hpe
www.cve.org
9
local privilege vulnerability
hpe proliant
intel innovation engine
physical security
compensating control
EPSS
0.001
Percentile
30.6%
A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.
CNA Affected
[
{
"product": "HPE ProLiant BL460c Gen10 Server Blade; HPE ProLiant DL360 Gen10 Server; HPE ProLiant DL380 Gen10 Server; HPE ProLiant DL560 Gen10 Server; HPE ProLiant DL580 Gen10 Server; HPE ProLiant ML110 Gen10 Server; HPE ProLiant XL230k Gen10 Server; HPE Synergy 480 Gen10 Compute Module; HPE Synergy 660 Gen10 Compute Module; HPE ProLiant DL180 Gen10 Server; HPE ProLiant DL160 Gen10 Server; HPE ProLiant DL120 Gen10 Server; HPE ProLiant XL190r Gen10 Server; HPE ProLiant ML350 Gen10 Server; HPE ProLiant XL170r Gen10 Server; HPE Apollo 2000 System; HPE Apollo 4500 System; HPE ProLiant XL270d Gen10 Server; HPE Apollo 4200 Gen10 Server; HPE ProLiant e910 Server Blade; HPE ProLiant XL450 Gen10 Server; HPE ProLiant XL230k Gen10 Server - bad oid",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "all current IE firmware"
}
]
}
]Related
prion
prion
Privilege escalation
2020-11-05 21:15:00
cve
cve
CVE-2020-7207
2020-11-05 21:15:13
nvd
nvd
CVE-2020-7207
2020-11-05 21:15:13