PT-2020-19466 · Intel+1 · Intel Innovation Engine+1

Published 2020-11-05 · Updated 2021-07-21 · CVE-2020-7207

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Proliant Gen10 Servers (affected versions not specified)

Description A local elevation of privilege using physical access security issue was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

Recommendations Ensure your server is always physically secured. Use appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

Fix

Related Identifiers

CVE-2020-7207

Affected Products

Hpe Proliant Gen10 Servers

Intel Innovation Engine

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-7207 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_us · Vendor Advisory
• https://t.me/cibsecurity/15910 · Telegram Post