CVE-2020-8687

CVE-2020-8687 affects the Intel RSTe Software RAID Driver installer for the Intel Server Board M10JNP2SB prior to version 4.7.0.1119. Root cause: an uncontrolled search path in the installer could enable privilege escalation on a local, authenticated scenario. Impact: escalation of privilege with...

CVE-2020-8733

Improper buffer restrictions in the firmware for IntelR Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8733

Intel Server Board M10JNP2SB firmware before 7.210 is affected by two privilege-escalation issues (CVE-2020-8733 and CVE-2020-8734) due to improper buffer restrictions and improper input validation, respectively. Both require local access and could allow a privileged user to escalate privileges w...

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges. The recently patched flaw CVE-2020-8708 ranks 9.6 out of 10 on the CVSS...

Intel® Server Board M10JNP2SB Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board M10JNP2SB may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8733 Description: Improper buffer restrictions in the firmwar...

Intel® RSTe Software RAID Driver Advisory

Summary: A potential security vulnerability in the Intel® Rapid Storage Technology Enterprise RSTe Software RAID Driver may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8687 Description:...

Intel® Server Board Families Advisory

Summary: Potential security vulnerabilities in some Intel® Server Board Families may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12300 Description: Uninitialized pointer in BIOS firmware for...

Intel® Server Boards Firmware Advisory

Summary: A potential security vulnerability in Intel® Server Board firmware may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12173 Description:...

Intel Firmware 2018.4 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel firmware may allow for escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12201 Description:...

CVE-2018-12204

Improper memory initialization in Platform Sample/Silicon Reference firmware IntelR Server Board, IntelR Server System and IntelR Compute Module may allow privileged user to potentially enable an escalation of privilege via local access...

Intel Server Board, Server System and Compute Module Access Control Error Vulnerability

Intel Server Board, Compute Module and Server System are all products of Intel Corporation.Intel Server Board is a server motherboard.Compute Module is a compute module.Server System is a server array card. The Server System is a server array card. An access control error vulnerability exists in...

Intel Server Board and Compute Module Trust Management Issues Vulnerability

Intel Server Board and Compute Module are both products of Intel Corporation.Intel Server Board is a server motherboard.Compute Module is a computing module. A trust management issue vulnerability exists in Intel Server Board and Compute Module. An attacker could exploit this vulnerability to...

CVE-2018-12173

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial ...

CVE-2018-12172

Improper password hashing in firmware in Intel Server Board S7200AP,S7200APR and Intel Compute Module HNS7200AP, HNS7200AP may allow a privileged user to potentially disclose firmware passwords via local access...

Input validation

Improper password hashing in firmware in Intel Server Board S7200AP,S7200APR and Intel Compute Module HNS7200AP, HNS7200AP may allow a privileged user to potentially disclose firmware passwords via local access...

Improper access control

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial ...

CVE-2018-12172

Improper password hashing in firmware in Intel Server Board S7200AP,S7200APR and Intel Compute Module HNS7200AP, HNS7200AP may allow a privileged user to potentially disclose firmware passwords via local access...

CVE-2018-12173

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial ...

CVE-2018-12172

This CVE (CVE-2018-12172) concerns an improper password hashing weakness in firmware for Intel® Server Board Family (S7200AP, S7200APR) and Intel® Compute Module (HNS7200AP, HNS7200AP). The root cause is insecure password handling in the firmware that could allow a privileged local user to potent...

Intel® Server Board Firmware Advisory

Summary: A potential security vulnerability in Intel® Server Board Family products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-12172 Description: Improper password hashing in firmware in...