PT-2020-4126 · Intel · Intel Server Board S2600Cw Family

Published 2020-08-11 · Updated 2020-08-19 · CVE-2020-12300

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intel Server Board S2600CW Family versions (affected versions not specified) Intel Server Board S2600KP Family versions (affected versions not specified) Intel Server Board S2600TP Family versions (affected versions not specified) Intel Server Board S2600WT Family versions (affected versions not specified)

Description: The issue is related to the use of uninitialized memory in the firmware of the Intel Server Board families. This could allow an attacker to potentially escalate privileges via local access.

Recommendations: For Intel Server Board S2600CW Family, update the firmware to a version that initializes memory properly. For Intel Server Board S2600KP Family, update the firmware to a version that initializes memory properly. For Intel Server Board S2600TP Family, update the firmware to a version that initializes memory properly. For Intel Server Board S2600WT Family, update the firmware to a version that initializes memory properly.

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2020-04548

CVE-2020-12300

Affected Products

Intel Server Board S2600Cw Family

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04548 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12300 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12300 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20200814-0001 · Note