What is the CVSS score of CVE-2020-12300?

CVE-2020-12300 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2020-12300?

Yes, a patch is available for CVE-2020-12300. Update the affected software to the latest version immediately.

S2600Cw2 Firmware CVE-2020-12300

HIGH

Access of Uninitialized Pointer (CWE-824)

2020-08-13 secure@intel.com

Privilege Escalation Intel Memory Corruption S2600Cw2 Firmware S2600Cw2S Firmware S2600Cwt Firmware S2600Cwts Firmware S2600Cw2R Firmware S2600Cw2Sr Firmware S2600Cwtr Firmware S2600Cwtsr Firmware S2600Kp Firmware S2600Kpf Firmware S2600Kpr Firmware S2600Kpfr Firmware S2600Kptr Firmware S2600Tp Firmware S2600Tpf Firmware S2600Tpfr Firmware S2600Tpnr Firmware S2600Tpr Firmware S2600Wt2 Firmware S2600Wtt Firmware S2600Wttr Firmware S2600Wt2R Firmware S2600Wtts1R Firmware

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Aug 13, 2020 - 04:15 nvd

HIGH 8.2

DescriptionNVD

Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-824. Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel S2600Cw2 Firmware, Intel S2600Cw2S Firmware, Intel S2600Cwt Firmware, Intel S2600Cwts Firmware, Intel S2600Cw2R Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.