Intel® Server Boards, Server Systems and Compute Modules Advisory

🗓️ 09 Feb 2021 00:00:00Reported by Intel Security CenterType

Potential security vulnerabilities in some Intel Server Boards, Server Systems and Compute Modules BMC firmware may allow privilege escalation or information disclosure. Firmware updates mitigate these vulnerabilities. Affected products include Intel Server System R1000WF, R2000WF Families, Intel Server Board S2600WF, S2600ST Families, and Compute Module HNS2600BP Family

Reporter	Title	Published	Views	Family All 51
BDU FSTEC	The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules arises from operations that occur outside the buffer boundaries in memory. This vulnerability allows attackers to exploit their privileges.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules arises from insufficient validation of input data, allowing attackers to exploit their privileges.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, which stems from the use of rigidly encrypted credentials, allows attackers to gain unauthorized access to protected information.	16 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules arises from buffer overflows in dynamic memory, allowing attackers to exploit their privileges.	16 Feb 202100:00	–	bdu_fstec
Circl	CVE-2020-12374	19 Feb 202118:51	–	circl
Circl	CVE-2020-12377	17 Feb 202116:49	–	circl
CNNVD	Multiple Intel Server System Product Buffer Error Vulnerabilities	19 Feb 202100:00	–	cnnvd
CNNVD	多款 Intel BMC 固件信任管理问题漏洞	10 Feb 202100:00	–	cnnvd
CNNVD	多款 Intel BMC 固件输入验证错误漏洞	10 Feb 202100:00	–	cnnvd
CNNVD	多款 Intel BMC 固件缓冲区错误漏洞	10 Feb 202100:00	–	cnnvd

09 Feb 2021 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24.6

CVSS 3.17.8

EPSS0.00267