CVE-2020-8729
Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - secure@intel.com
- Published
- 2020-08-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-120
Affected products
- Compute Module Hns2600bp Firmware (Intel)
- Compute Module Hns2600kp Firmware (Intel)
- Compute Module Hns2600tp Firmware (Intel)
- Compute Module S2600tp Firmware (Intel)
- Server Board S1200sp Firmware (Intel)
- Server Board S2600bp Firmware (Intel)
- Server Board S2600cw (Intel)
- Server Board S2600kp Firmware (Intel)
- Server Board S2600st Firmware (Intel)
- Server Board S2600wf Firmware (Intel)
- Server Board S2600wt Firmware (Intel)
- Server System Lr1304sp Firmware (Intel)
- Server System Lsvrp Firmware (Intel)
- Server System R1000sp Firmware (Intel)
- Server System R1000wf Firmware (Intel)
- Server System R1000wt Firmware (Intel)
- Server System R2000wf Firmware (Intel)
- Server System R2000wt Firmware (Intel)
References
- https://security.netapp.com/advisory/ntap-20200814-0002/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
