CVE-2020-8709

Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Score

CVSS 3.1 8.8 High

Status

Modified - secure@intel.com

Published

2020-08-13

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Compute Module Hns2600bp Firmware (Intel)
• Compute Module Hns2600kp Firmware (Intel)
• Compute Module Hns2600tp Firmware (Intel)
• Compute Module S2600tp Firmware (Intel)
• Server Board S1200sp Firmware (Intel)
• Server Board S2600bp Firmware (Intel)
• Server Board S2600cw (Intel)
• Server Board S2600kp Firmware (Intel)
• Server Board S2600st Firmware (Intel)
• Server Board S2600wf Firmware (Intel)
• Server Board S2600wt Firmware (Intel)
• Server System Lr1304sp Firmware (Intel)
• Server System Lsvrp Firmware (Intel)
• Server System R1000sp Firmware (Intel)
• Server System R1000wf Firmware (Intel)
• Server System R1000wt Firmware (Intel)
• Server System R2000wf Firmware (Intel)
• Server System R2000wt Firmware (Intel)

References

• https://security.netapp.com/advisory/ntap-20200814-0002/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html