CVE-2020-12300

HIGH

8.2

Description

Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access.

Details CVE

Score CVSS v3.18.2

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie8/13/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

intel:s2600cw2intel:s2600cw2_firmwareintel:s2600cw2rintel:s2600cw2r_firmwareintel:s2600cw2sintel:s2600cw2s_firmwareintel:s2600cw2srintel:s2600cw2sr_firmwareintel:s2600cwtintel:s2600cwt_firmwareintel:s2600cwtrintel:s2600cwtr_firmwareintel:s2600cwtsintel:s2600cwts_firmwareintel:s2600cwtsrintel:s2600cwtsr_firmwareintel:s2600kpintel:s2600kp_firmwareintel:s2600kpfintel:s2600kpf_firmwareintel:s2600kpfrintel:s2600kpfr_firmwareintel:s2600kprintel:s2600kpr_firmwareintel:s2600kptrintel:s2600kptr_firmwareintel:s2600tpintel:s2600tp_firmwareintel:s2600tpfintel:s2600tpf_firmwareintel:s2600tpfrintel:s2600tpfr_firmwareintel:s2600tpnrintel:s2600tpnr_firmwareintel:s2600tprintel:s2600tpr_firmwareintel:s2600wt2intel:s2600wt2_firmwareintel:s2600wt2rintel:s2600wt2r_firmwareintel:s2600wttintel:s2600wtt_firmwareintel:s2600wttrintel:s2600wttr_firmwareintel:s2600wtts1rintel:s2600wtts1r_firmware

Faiblesses (CWE)

CWE-824

References

https://security.netapp.com/advisory/ntap-20200814-0001/(secure@intel.com)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html(secure@intel.com)

https://security.netapp.com/advisory/ntap-20200814-0001/(af854a3a-2127-422b-91ae-364da2661108)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.