CVE-2020-12380

Out of bounds read in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Hardcoded credentials

Use of hard-coded key in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access...

Heap overflow

Heap overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Cross site scripting

Out of bounds read in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Insufficient input validation in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12376

CVE-2020-12376 affects Intel® Server Boards, Server Systems and Compute Modules BMC firmware. The issue is use of a hard-coded key in firmware before version 2.47, potentially enabling information disclosure via local access by an authenticated user. Intel’s advisory Intel‑SA‑00434 confirms the v...

CVE-2020-12376

Use of hard-coded key in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access...

CVE-2020-0572

Improper input validation in the firmware for IntelR Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access...

The vulnerability of microprogramming software in Intel Server Boards S2600ST, S2600BP, and S2600WF exists due to insufficient testing of input data. This vulnerability allows attackers to increase their privileges.

The vulnerability of the microprogramming software on Intel Server Board S2600ST, S2600BP, and S2600WF exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of microprogrammed software in Intel Server Board S2600CW Family, S2600KP Family, S2600TP Family, and S2600WT Family occurs due to the use of uninitialized memory, allowing attackers to exploit their privileges.

The vulnerability of microprogramming software in Intel Server Board S2600CW Family, S2600KP Family, S2600TP Family, and S2600WT Family is related to the use of uninitialized memory. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2020-8720

Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-12301

Improper initialization in BIOS firmware for IntelR Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12301

Improper initialization in BIOS firmware for IntelR Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12299

Improper input validation in BIOS firmware for IntelR Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper initialization in BIOS firmware for IntelR Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8732

Heap-based buffer overflow in the firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8731

Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8723

Cross-site scripting for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8729

Buffer copy without checking size of input for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8730

Heap-based overflow for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...