CVE-2020-12300
High
Description
Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS8.2
Exploit probability—
ProductIntel S2600kp Firmware
PublishedAug 13, 2020
First seenAug 13, 2020
How to fix
Update
- intel s2600kp_firmware01.01.0029 or later
- intel s2600cw2_firmware01.01.0029 or later
- intel s2600cw2s_firmware01.01.0029 or later
- intel s2600cwt_firmware01.01.0029 or later
- intel s2600cwts_firmware01.01.0029 or later
- intel s2600cw2r_firmware01.01.0029 or later
- intel s2600cw2sr_firmware01.01.0029 or later
- intel s2600cwtr_firmware01.01.0029 or later
- intel s2600cwtsr_firmware01.01.0029 or later
- intel s2600kpf_firmware01.01.0029 or later
- intel s2600kpr_firmware01.01.0029 or later
- intel s2600kpfr_firmware01.01.0029 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel s2600kp_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cw2_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cw2s_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cwt_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cwts_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cw2r_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cw2sr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cwtr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600cwtsr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600kpf_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600kpr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600kpfr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600kptr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600tp_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600tpf_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600tpfr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600tpnr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600tpr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600wt2_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600wtt_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600wttr_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600wt2r_firmware | v < 01.01.0029 | 01.01.0029 |
| intel s2600wtts1r_firmware | v < 01.01.0029 | 01.01.0029 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.