8.2

CVE-2020-12299

Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ S2600stqr Firmware Version < 02.01.0012
   Intel ≫ S2600stqr Version-
Intel ≫ S2600stbr Firmware Version < 02.01.0012
   Intel ≫ S2600stbr Version-
Intel ≫ S2600bpsr Firmware Version < 02.01.0012
   Intel ≫ S2600bpsr Version-
Intel ≫ S2600bpbr Firmware Version < 02.01.0012
   Intel ≫ S2600bpbr Version-
Intel ≫ S2600bpqr Firmware Version < 02.01.0012
   Intel ≫ S2600bpqr Version-
Intel ≫ S2600wftr Firmware Version < 02.01.0012
   Intel ≫ S2600wftr Version-
Intel ≫ S2600wf0r Firmware Version < 02.01.0012
   Intel ≫ S2600wf0r Version-
Intel ≫ S2600wfqr Firmware Version < 02.01.0012
   Intel ≫ S2600wfqr Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.165
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.