CVE-2020-8731
High
Description
Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS8.8
Exploit probability29. percentile0.3%
ProductIntel Server Board S2600wt Firmware
PublishedAug 13, 2020
First seenAug 13, 2020
How to fix
Update
- intel server_board_s2600wt_firmware1.59 or later
- intel server_system_r1000wt_firmware1.59 or later
- intel server_system_r2000wt_firmware1.59 or later
- intel server_board_s2600cw1.59 or later
- intel compute_module_hns2600kp_firmware1.59 or later
- intel server_board_s2600kp_firmware1.59 or later
- intel compute_module_hns2600tp_firmware1.59 or later
- intel compute_module_s2600tp_firmware1.59 or later
- intel server_board_s1200sp_firmware1.59 or later
- intel server_system_lr1304sp_firmware1.59 or later
- intel server_system_lsvrp_firmware1.59 or later
- intel server_system_r1000sp_firmware1.59 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel server_board_s2600wt_firmware | v < 1.59 | 1.59 |
| intel server_system_r1000wt_firmware | v < 1.59 | 1.59 |
| intel server_system_r2000wt_firmware | v < 1.59 | 1.59 |
| intel server_board_s2600cw | v < 1.59 | 1.59 |
| intel compute_module_hns2600kp_firmware | v < 1.59 | 1.59 |
| intel server_board_s2600kp_firmware | v < 1.59 | 1.59 |
| intel compute_module_hns2600tp_firmware | v < 1.59 | 1.59 |
| intel compute_module_s2600tp_firmware | v < 1.59 | 1.59 |
| intel server_board_s1200sp_firmware | v < 1.59 | 1.59 |
| intel server_system_lr1304sp_firmware | v < 1.59 | 1.59 |
| intel server_system_lsvrp_firmware | v < 1.59 | 1.59 |
| intel server_system_r1000sp_firmware | v < 1.59 | 1.59 |
| intel server_board_s2600wf_firmware | v < 1.59 | 1.59 |
| intel server_system_r1000wf_firmware | v < 1.59 | 1.59 |
| intel server_system_r2000wf_firmware | v < 1.59 | 1.59 |
| intel server_board_s2600st_firmware | v < 1.59 | 1.59 |
| intel compute_module_hns2600bp_firmware | v < 1.59 | 1.59 |
| intel server_board_s2600bp_firmware | v < 1.59 | 1.59 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.