Main Vulnerability Database Vulnerabilities #VU45727

Improper Initialization in Intel products - CVE-2020-12301

Published: August 14, 2020

Vulnerability identifier: #VU45727

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-12301

CWE-ID: CWE-665

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper initialization in BIOS firmware. A local administrator can run a specially crafted application to execute arbitrary code with escalated privileges on the system.

Affected software

Intel Server Board S2600ST
Intel Server Board S2600BP
Intel Server Board S2600WF

How to mitigate CVE-2020-12301

Install updates from vendor's website.

Intel Server Board S2600ST - update to 02.01.0011
Intel Server Board S2600BP - update to 02.01.0011
Intel Server Board S2600WF - update to 02.01.0011

External References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Related Security Bulletins