CVE-2020-8711
Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - secure@intel.com
- Published
- 2020-08-13
- Last modified
- 2024-08-04
Affected products
- Compute Module Hns2600bp Firmware (Intel)
- Compute Module Hns2600kp Firmware (Intel)
- Compute Module Hns2600tp Firmware (Intel)
- Compute Module S2600tp Firmware (Intel)
- Server Board S1200sp Firmware (Intel)
- Server Board S2600bp Firmware (Intel)
- Server Board S2600cw (Intel)
- Server Board S2600kp Firmware (Intel)
- Server Board S2600st Firmware (Intel)
- Server Board S2600wf Firmware (Intel)
- Server Board S2600wt Firmware (Intel)
- Server System Lr1304sp Firmware (Intel)
- Server System Lsvrp Firmware (Intel)
- Server System R1000sp Firmware (Intel)
- Server System R1000wf Firmware (Intel)
- Server System R1000wt Firmware (Intel)
- Server System R2000wf Firmware (Intel)
- Server System R2000wt Firmware (Intel)
References
- https://security.netapp.com/advisory/ntap-20200814-0002/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
