CVE-2020-8717
Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - secure@intel.com
- Published
- 2020-08-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-20
Affected products
- Compute Module Hns2600bp Firmware (Intel)
- Compute Module Hns2600kp Firmware (Intel)
- Compute Module Hns2600tp Firmware (Intel)
- Compute Module S2600tp Firmware (Intel)
- Server Board S1200sp Firmware (Intel)
- Server Board S2600bp Firmware (Intel)
- Server Board S2600cw (Intel)
- Server Board S2600kp Firmware (Intel)
- Server Board S2600st Firmware (Intel)
- Server Board S2600wf Firmware (Intel)
- Server Board S2600wt Firmware (Intel)
- Server System Lr1304sp Firmware (Intel)
- Server System Lsvrp Firmware (Intel)
- Server System R1000sp Firmware (Intel)
- Server System R1000wf Firmware (Intel)
- Server System R1000wt Firmware (Intel)
- Server System R2000wf Firmware (Intel)
- Server System R2000wt Firmware (Intel)
References
- https://security.netapp.com/advisory/ntap-20200814-0002/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
