Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-8714

Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.

Published

2020-08-13T03:15:15.493

Last Modified

2024-11-21T05:39:19.010

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel server_board_s2600wt_firmware < 1.59 Yes
Hardware intel server_board_s2600wt2 - No
Hardware intel server_board_s2600wt2r - No
Hardware intel server_board_s2600wtt - No
Hardware intel server_board_s2600wttr - No
Operating System intel server_system_r1000wt_firmware < 1.59 Yes
Hardware intel server_system_r1208wt2gs - No
Hardware intel server_system_r1208wt2gsr - No
Hardware intel server_system_r1208wttgs - No
Hardware intel server_system_r1208wttgsbpp - No
Hardware intel server_system_r1208wttgsr - No
Hardware intel server_system_r1304wt2gs - No
Hardware intel server_system_r1304wt2gsr - No
Hardware intel server_system_r1304wttgs - No
Hardware intel server_system_r1304wttgsr - No
Operating System intel server_system_r2000wt_firmware < 1.59 Yes
Hardware intel server_system_r2208wt2ys - No
Hardware intel server_system_r2208wt2ysr - No
Hardware intel server_system_r2208wttyc1 - No
Hardware intel server_system_r2208wttyc1r - No
Hardware intel server_system_r2208wttys - No
Hardware intel server_system_r2208wttysr - No
Hardware intel server_system_r2224wttys - No
Hardware intel server_system_r2224wttysr - No
Hardware intel server_system_r2308wttys - No
Hardware intel server_system_r2308wttysr - No
Hardware intel server_system_r2312wttys - No
Hardware intel server_system_r2312wttysr - No
Operating System intel server_board_s2600cw < 1.59 Yes
Application intel server_board_s2600cw2 - No
Application intel server_board_s2600cw2r - No
Application intel server_board_s2600cw2s - No
Application intel server_board_s2600cw2sr - No
Application intel server_board_s2600cwt - No
Application intel server_board_s2600cwtr - No
Application intel server_board_s2600cwts - No
Application intel server_board_s2600cwtsr - No
Operating System intel compute_module_hns2600kp_firmware < 1.59 Yes
Hardware intel compute_module_hns2600kp - No
Hardware intel compute_module_hns2600kpf - No
Hardware intel compute_module_hns2600kpfr - No
Hardware intel compute_module_hns2600kpr - No
Operating System intel server_board_s2600kp_firmware < 1.59 Yes
Hardware intel server_board_s2600kp - No
Hardware intel server_board_s2600kpf - No
Hardware intel server_board_s2600kpfr - No
Hardware intel server_board_s2600kpr - No
Hardware intel server_board_s2600kptr - No
Operating System intel compute_module_hns2600tp_firmware < 1.59 Yes
Hardware intel compute_module_hns2600tp - No
Hardware intel compute_module_hns2600tp24r - No
Hardware intel compute_module_hns2600tp24sr - No
Hardware intel compute_module_hns2600tpf - No
Hardware intel compute_module_hns2600tpfr - No
Hardware intel compute_module_hns2600tpr - No
Operating System intel compute_module_s2600tp_firmware < 1.59 Yes
Hardware intel server_board_s2600tp - No
Hardware intel server_board_s2600tpf - No
Hardware intel server_board_s2600tpfr - No
Hardware intel server_board_s2600tpr - No
Operating System intel server_board_s1200sp_firmware < 1.59 Yes
Hardware intel server_board_s1200spl - No
Hardware intel server_board_s1200splr - No
Hardware intel server_board_s1200spo - No
Hardware intel server_board_s1200spor - No
Hardware intel server_board_s1200sps - No
Hardware intel server_board_s1200spsr - No
Operating System intel server_system_lr1304sp_firmware < 1.59 Yes
Hardware intel server_system_lr1304spcfg1 - No
Hardware intel server_system_lr1304spcfg1r - No
Hardware intel server_system_lr1304spcfsgx1 - No
Operating System intel server_system_lsvrp_firmware < 1.59 Yes
Hardware intel server_system_lsvrp4304es6xx1 - No
Hardware intel server_system_lsvrp4304es6xxr - No
Operating System intel server_system_r1000sp_firmware < 1.59 Yes
Hardware intel server_system_r1208sposhor - No
Hardware intel server_system_r1208sposhorr - No
Hardware intel server_system_r1304sposhbn - No
Hardware intel server_system_r1304sposhbnr - No
Hardware intel server_system_r1304sposhor - No
Hardware intel server_system_r1304sposhorr - No
Operating System intel server_board_s2600wf_firmware < 1.59 Yes
Hardware intel server_board_s2600wf0 - No
Hardware intel server_board_s2600wf0r - No
Hardware intel server_board_s2600wfq - No
Hardware intel server_board_s2600wfqr - No
Hardware intel server_board_s2600wft - No
Hardware intel server_board_s2600wftr - No
Operating System intel server_system_r1000wf_firmware < 1.59 Yes
Hardware intel server_system_lnetcnt3y - No
Hardware intel server_system_mcb2208wfaf4 - No
Hardware intel server_system_mcb2208wfaf5 - No
Hardware intel server_system_mcb2208wfaf6 - No
Hardware intel server_system_mcb2208wfhy2 - No
Hardware intel server_system_nb2208wfqnfvi - No
Hardware intel server_system_r1208wfqysr - No
Hardware intel server_system_r1208wftys - No
Hardware intel server_system_r1208wftysr - No
Hardware intel server_system_r1304wf0ys - No
Hardware intel server_system_r1304wf0ysr - No
Hardware intel server_system_r1304wftys - No
Hardware intel server_system_r1304wftysr - No
Operating System intel server_system_r2000wf_firmware < 1.59 Yes
Hardware intel server_system_r2208wf0zs - No
Hardware intel server_system_r2208wf0zsr - No
Hardware intel server_system_r2208wfqzs - No
Hardware intel server_system_r2208wfqzsr - No
Hardware intel server_system_r2208wftzs - No
Hardware intel server_system_r2208wftzsr - No
Hardware intel server_system_r2224wfqzs - No
Hardware intel server_system_r2224wftzs - No
Hardware intel server_system_r2224wftzsr - No
Hardware intel server_system_r2308wftzs - No
Hardware intel server_system_r2308wftzsr - No
Hardware intel server_system_r2312wf0np - No
Hardware intel server_system_r2312wf0npr - No
Hardware intel server_system_r2312wfqzs - No
Hardware intel server_system_r2312wftzs - No
Hardware intel server_system_r2312wftzsr - No
Hardware intel server_system_vrn2208waf6 - No
Hardware intel server_system_vrn2208wfaf81 - No
Hardware intel server_system_vrn2208wfaf82 - No
Hardware intel server_system_vrn2208wfaf83 - No
Hardware intel server_system_vrn2208wfhy6 - No
Operating System intel server_board_s2600st_firmware < 1.59 Yes
Hardware intel server_board_s2600stb - No
Hardware intel server_board_s2600stbr - No
Hardware intel server_board_s2600stq - No
Hardware intel server_board_s2600stqr - No
Operating System intel compute_module_hns2600bp_firmware < 1.59 Yes
Hardware intel compute_module_hns2600bpb - No
Hardware intel compute_module_hns2600bpb24 - No
Hardware intel compute_module_hns2600bpb24r - No
Hardware intel compute_module_hns2600bpblc - No
Hardware intel compute_module_hns2600bpblc24 - No
Hardware intel compute_module_hns2600bpblc24r - No
Hardware intel compute_module_hns2600bpblcr - No
Hardware intel compute_module_hns2600bpbr - No
Hardware intel compute_module_hns2600bpq - No
Hardware intel compute_module_hns2600bpq24 - No
Hardware intel compute_module_hns2600bpq24r - No
Hardware intel compute_module_hns2600bpqr - No
Hardware intel compute_module_hns2600bps - No
Hardware intel compute_module_hns2600bps24 - No
Hardware intel compute_module_hns2600bps24r - No
Hardware intel compute_module_hns2600bpsr - No
Operating System intel server_board_s2600bp_firmware < 1.59 Yes
Hardware intel server_board_s2600bpb - No
Hardware intel server_board_s2600bpbr - No
Hardware intel server_board_s2600bpq - No
Hardware intel server_board_s2600bpqr - No
Hardware intel server_board_s2600bps - No
Hardware intel server_board_s2600bpsr - No
References