CVE-2020-8710

published 2020-08-13

CVE-2020-8710: Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to…

Priority P4 27 medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
intel	compute_module_hns2600bp_firmware	< 2.45	2.45
intel	compute_module_hns2600kp_firmware	< 2.45	2.45
intel	compute_module_hns2600tp_firmware	< 2.45	2.45
intel	compute_module_s2600tp_firmware	< 2.45	2.45
intel	server_board_s1200sp_firmware	< 2.45	2.45
intel	server_board_s2600bp_firmware	< 2.45	2.45
intel	server_board_s2600cw	< 2.45	2.45
intel	server_board_s2600kp_firmware	< 2.45	2.45
intel	server_board_s2600st_firmware	< 2.45	2.45
intel	server_board_s2600wf_firmware	< 2.45	2.45
intel	server_board_s2600wt_firmware	< 2.45	2.45
intel	server_system_lr1304sp_firmware	< 2.45	2.45
intel	server_system_lsvrp_firmware	< 2.45	2.45
intel	server_system_r1000sp_firmware	< 2.45	2.45
intel	server_system_r1000wf_firmware	< 2.45	2.45
intel	server_system_r1000wt_firmware	< 2.45	2.45
intel	server_system_r2000wf_firmware	< 2.45	2.45
intel	server_system_r2000wt_firmware	< 2.45	2.45

CVSS provenance

nvd v3.1 6.7 MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-120