1. Home
  2. CVE Database
  3. CVE-2020-8710
MEDIUM · 6.7

CVE-2020-8710

Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via ...

Vulnerability Description

Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelServer Board S2600Wt Firmware< 2.45
IntelServer Board S2600Wt2-
IntelServer Board S2600Wt2R-
IntelServer Board S2600Wtt-
IntelServer Board S2600Wttr-
IntelServer System R1000Wt Firmware< 2.45
IntelServer System R1208Wt2Gs-
IntelServer System R1208Wt2Gsr-
IntelServer System R1208Wttgs-
IntelServer System R1208Wttgsbpp-
IntelServer System R1208Wttgsr-
IntelServer System R1304Wt2Gs-
IntelServer System R1304Wt2Gsr-
IntelServer System R1304Wttgs-
IntelServer System R1304Wttgsr-
IntelServer System R2000Wt Firmware< 2.45
IntelServer System R2208Wt2Ys-
IntelServer System R2208Wt2Ysr-
IntelServer System R2208Wttyc1-
IntelServer System R2208Wttyc1R-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2020-8710?

CVE-2020-8710 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via ...

How severe is CVE-2020-8710?

CVE-2020-8710 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8710?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Server Board S2600Wt Firmware, Intel Server Board S2600Wt2, Intel Server Board S2600Wt2R, Intel Server Board S2600Wtt, Intel Server Board S2600Wttr.