Improper access control

2018-10-1018:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

CPENameOperatorVersion
compute_module_hns2600bp_firmwarelt00.01.0014
compute_module_hns2600bpr_firmwarelt00.01.0014
server_board_s2600bp_firmwarelt00.01.0014
server_board_s2600bpr_firmwarelt00.01.0014
server_board_s2600st_firmwarelt00.01.0014
server_board_s2600str_firmwarelt00.01.0014
server_board_s2600wf_firmwarelt00.01.0014
server_board_s2600wfr_firmwarelt00.01.0014
server_system_h2000g_firmwarelt00.01.0014
server_system_h2000gr_firmwarelt00.01.0014

Name	Operator	Version
compute_module_hns2600bp_firmware	lt	00.01.0014
compute_module_hns2600bpr_firmware	lt	00.01.0014
server_board_s2600bp_firmware	lt	00.01.0014
server_board_s2600bpr_firmware	lt	00.01.0014
server_board_s2600st_firmware	lt	00.01.0014
server_board_s2600str_firmware	lt	00.01.0014
server_board_s2600wf_firmware	lt	00.01.0014
server_board_s2600wfr_firmware	lt	00.01.0014
server_system_h2000g_firmware	lt	00.01.0014
server_system_h2000gr_firmware	lt	00.01.0014