PT-2020-4353 · Intel · Intel Server Systems+2

Published 2020-08-11 · Updated 2020-08-19 · CVE-2020-8715

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59

Description: The issue is related to the release of an incorrect pointer in the firmware of Intel server boards, server systems, and compute modules. This could potentially allow an unauthenticated user to cause a denial of service via local access.

Recommendations: For versions prior to 1.59, update to version 1.59 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-763

Related Identifiers

BDU:2020-04856

CVE-2020-8715

Affected Products

Intel Compute Modules

Intel Server Boards

Intel Server Systems

References · 5

• https://bdu.fstec.ru/vul/2020-04856 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8715 · Security Note
• https://security.netapp.com/advisory/ntap-20200814-0002 · Note