6.7

CVE-2020-0572

Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Server Board S2600st Firmware Version < 02.01.0011
   Intel ≫ Server Board S2600stbr Version -
   Intel ≫ Server Board S2600stqr Version -
Intel ≫ Server Board S2600wf Firmware Version < 02.01.0012
   Intel ≫ Server Board S2600wf0r Version -
   Intel ≫ Server Board S2600wfqr Version -
   Intel ≫ Server Board S2600wftr Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.272
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00439
Patch
Vendor Advisory