CVE-2020-8711
Medium
Description
Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Server Board S2600wt Firmware
PublishedAug 13, 2020
First seenAug 13, 2020
How to fix
Update
- intel server_board_s2600wt_firmware2.45 or later
- intel server_system_r1000wt_firmware2.45 or later
- intel server_system_r2000wt_firmware2.45 or later
- intel server_board_s2600cw2.45 or later
- intel compute_module_hns2600kp_firmware2.45 or later
- intel server_board_s2600kp_firmware2.45 or later
- intel compute_module_hns2600tp_firmware2.45 or later
- intel compute_module_s2600tp_firmware2.45 or later
- intel server_board_s1200sp_firmware2.45 or later
- intel server_system_lr1304sp_firmware2.45 or later
- intel server_system_lsvrp_firmware2.45 or later
- intel server_system_r1000sp_firmware2.45 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel server_board_s2600wt_firmware | v < 2.45 | 2.45 |
| intel server_system_r1000wt_firmware | v < 2.45 | 2.45 |
| intel server_system_r2000wt_firmware | v < 2.45 | 2.45 |
| intel server_board_s2600cw | v < 2.45 | 2.45 |
| intel compute_module_hns2600kp_firmware | v < 2.45 | 2.45 |
| intel server_board_s2600kp_firmware | v < 2.45 | 2.45 |
| intel compute_module_hns2600tp_firmware | v < 2.45 | 2.45 |
| intel compute_module_s2600tp_firmware | v < 2.45 | 2.45 |
| intel server_board_s1200sp_firmware | v < 2.45 | 2.45 |
| intel server_system_lr1304sp_firmware | v < 2.45 | 2.45 |
| intel server_system_lsvrp_firmware | v < 2.45 | 2.45 |
| intel server_system_r1000sp_firmware | v < 2.45 | 2.45 |
| intel server_board_s2600wf_firmware | v < 2.45 | 2.45 |
| intel server_system_r1000wf_firmware | v < 2.45 | 2.45 |
| intel server_system_r2000wf_firmware | v < 2.45 | 2.45 |
| intel server_board_s2600st_firmware | v < 2.45 | 2.45 |
| intel compute_module_hns2600bp_firmware | v < 2.45 | 2.45 |
| intel server_board_s2600bp_firmware | v < 2.45 | 2.45 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.