CVE-2020-8711

published 2020-08-13

CVE-2020-8711: Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
intel	compute_module_hns2600bp_firmware	< 2.45	2.45
intel	compute_module_hns2600kp_firmware	< 2.45	2.45
intel	compute_module_hns2600tp_firmware	< 2.45	2.45
intel	compute_module_s2600tp_firmware	< 2.45	2.45
intel	server_board_s1200sp_firmware	< 2.45	2.45
intel	server_board_s2600bp_firmware	< 2.45	2.45
intel	server_board_s2600cw	< 2.45	2.45
intel	server_board_s2600kp_firmware	< 2.45	2.45
intel	server_board_s2600st_firmware	< 2.45	2.45
intel	server_board_s2600wf_firmware	< 2.45	2.45
intel	server_board_s2600wt_firmware	< 2.45	2.45
intel	server_system_lr1304sp_firmware	< 2.45	2.45
intel	server_system_lsvrp_firmware	< 2.45	2.45
intel	server_system_r1000sp_firmware	< 2.45	2.45
intel	server_system_r1000wf_firmware	< 2.45	2.45
intel	server_system_r1000wt_firmware	< 2.45	2.45
intel	server_system_r2000wf_firmware	< 2.45	2.45
intel	server_system_r2000wt_firmware	< 2.45	2.45