Skip to main content

Server Board S2600Wt Firmware CVE-2020-8717

MEDIUM
Improper Input Validation (CWE-20)
2020-08-13 secure@intel.com
Denial Of Service Intel Server Board S2600Wt Firmware Server System R1000Wt Firmware Server System R2000Wt Firmware Server Board S2600Cw Compute Module Hns2600Kp Firmware Server Board S2600Kp Firmware Compute Module Hns2600Tp Firmware Compute Module S2600Tp Firmware Server Board S1200Sp Firmware Server System Lr1304Sp Firmware Server System Lsvrp Firmware Server System R1000Sp Firmware Server Board S2600Wf Firmware Server System R1000Wf Firmware Server System R2000Wf Firmware Server Board S2600St Firmware Compute Module Hns2600Bp Firmware Server Board S2600Bp Firmware
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 13, 2020 - 03:15 nvd
MEDIUM 5.5

DescriptionNVD

Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access.

AnalysisAI

Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access. Affected products include: Intel Server Board S2600Wt Firmware, Intel Server System R1000Wt Firmware, Intel Server System R2000Wt Firmware, Intel Server Board S2600Cw, Intel Compute Module Hns2600Kp Firmware. Version information: version 1.59.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Server Board S2600Wt Firmware

View all
CVE-2020-8732 HIGH
8.8 Aug 13

Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before ve
CVE-2020-8731 HIGH
8.8 Aug 13

Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute

CVE-2020-8730 HIGH
8.8 Aug 13

Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an
CVE-2020-8718 HIGH
8.8 Aug 13

Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m
CVE-2020-8713 HIGH
8.8 Aug 13

Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo
CVE-2020-8709 HIGH
8.8 Aug 13

Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before ve
CVE-2020-8708 HIGH
8.8 Aug 13

Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo
CVE-2020-8707 HIGH
8.8 Aug 13

Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may al
CVE-2020-8706 HIGH
8.8 Aug 13

Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may

CVE-2020-8722 HIGH
8.2 Aug 13

Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m
CVE-2020-8721 HIGH
8.2 Aug 13

Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may al
CVE-2020-8719 HIGH
8.2 Aug 13

Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2020-8717 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy