Lucene search

[email protected]NVD:CVE-2020-7207

HistoryNov 05, 2020 - 9:15 p.m.

CVE-2020-7207

2020-11-0521:15:13

[email protected]

web.nvd.nist.gov

elevation of privilege

hpe proliant

gen10 servers

physical access

security vulnerability

intel innovation engine

physical security

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.6%

JSON

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

Affected configurations

Nvd

Node

hpapollo_2000Match-

AND

hpapollo_2000_firmwareMatch-

Node

hpapollo_4200_gen10Match-

AND

hpapollo_4200_gen10_firmwareMatch-

Node

hpapollo_4500Match-

AND

hpapollo_4500_firmwareMatch-

Node

hpproliant_xl230k_gen10Match-

AND

hpproliant_xl230k_gen10_firmwareMatch-

Node

hpproliant_xl270d_gen10Match-

AND

hpproliant_xl270d_gen10_firmwareMatch-

Node

hpproliant_bl460c_gen10Match-

AND

hpproliant_bl460c_gen10_firmwareMatch-

Node

hpproliant_dl120_gen10Match-

AND

hpproliant_dl120_gen10_firmwareMatch-

Node

hpproliant_dl160_gen10Match-

AND

hpproliant_dl160_gen10_firmwareMatch-

Node

hpproliant_dl180_gen10_firmwareMatch-

AND

hpproliant_dl180_gen10Match-

Node

hpproliant_dl360_gen10_firmwareMatch-

AND

hpproliant_dl360_gen10Match-

Node

hpproliant_dl380_gen10_firmwareMatch-

AND

hpproliant_dl380_gen10Match-

Node

hpproliant_dl560_gen10_firmwareMatch-

AND

hpproliant_dl560_gen10Match-

Node

hpproliant_dl580_gen10_firmwareMatch-

AND

hpproliant_dl580_gen10Match-

Node

hpproliant_ml110_gen10_firmwareMatch-

AND

hpproliant_ml110_gen10Match-

Node

hpproliant_ml350_gen10_firmwareMatch-

AND

hpproliant_ml350_gen10Match-

Node

hpsynergy_480_gen10_firmwareMatch-

AND

hpsynergy_480_gen10Match-

Node

hpsynergy_660_gen10_firmwareMatch-

AND

hpsynergy_660_gen10Match-

Node

hpproliant_e910_firmwareMatch-

AND

hpproliant_e910Match-

Node

hpproliant_xl170r_gen10_firmwareMatch-

AND

hpproliant_xl170r_gen10Match-

Node

hpproliant_xl190r_gen10_firmwareMatch-

AND

hpproliant_xl190r_gen10Match-

Node

hpproliant_xl230k_gen10_firmwareMatch-

AND

hpproliant_xl230k_gen10Match-

Node

hpproliant_xl450_gen10_firmwareMatch-

AND

hpproliant_xl450_gen10Match-

VendorProductVersionCPE
hpapollo_2000-cpe:2.3:h:hp:apollo_2000:-:*:*:*:*:*:*:*
hpapollo_2000_firmware-cpe:2.3:o:hp:apollo_2000_firmware:-:*:*:*:*:*:*:*
hpapollo_4200_gen10-cpe:2.3:h:hp:apollo_4200_gen10:-:*:*:*:*:*:*:*
hpapollo_4200_gen10_firmware-cpe:2.3:o:hp:apollo_4200_gen10_firmware:-:*:*:*:*:*:*:*
hpapollo_4500-cpe:2.3:h:hp:apollo_4500:-:*:*:*:*:*:*:*
hpapollo_4500_firmware-cpe:2.3:o:hp:apollo_4500_firmware:-:*:*:*:*:*:*:*
hpproliant_xl230k_gen10-cpe:2.3:h:hp:proliant_xl230k_gen10:-:*:*:*:*:*:*:*
hpproliant_xl230k_gen10_firmware-cpe:2.3:o:hp:proliant_xl230k_gen10_firmware:-:*:*:*:*:*:*:*
hpproliant_xl270d_gen10-cpe:2.3:h:hp:proliant_xl270d_gen10:-:*:*:*:*:*:*:*
hpproliant_xl270d_gen10_firmware-cpe:2.3:o:hp:proliant_xl270d_gen10_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	apollo_2000	-	cpe:2.3:h:hp:apollo_2000:-:::::::*
hp	apollo_2000_firmware	-	cpe:2.3:o:hp:apollo_2000_firmware:-:::::::*
hp	apollo_4200_gen10	-	cpe:2.3:h:hp:apollo_4200_gen10:-:::::::*
hp	apollo_4200_gen10_firmware	-	cpe:2.3:o:hp:apollo_4200_gen10_firmware:-:::::::*
hp	apollo_4500	-	cpe:2.3:h:hp:apollo_4500:-:::::::*
hp	apollo_4500_firmware	-	cpe:2.3:o:hp:apollo_4500_firmware:-:::::::*
hp	proliant_xl230k_gen10	-	cpe:2.3:h:hp:proliant_xl230k_gen10:-:::::::*
hp	proliant_xl230k_gen10_firmware	-	cpe:2.3:o:hp:proliant_xl230k_gen10_firmware:-:::::::*
hp	proliant_xl270d_gen10	-	cpe:2.3:h:hp:proliant_xl270d_gen10:-:::::::*
hp	proliant_xl270d_gen10_firmware	-	cpe:2.3:o:hp:proliant_xl270d_gen10_firmware:-:::::::*

Rows per page:

1-10 of 421

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_us

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.6%

JSON

Related for NVD:CVE-2020-7207

prion1 cvelist1 cve1