Improper access control in Intel Ethernet 700 Series Controller Software - CVE-2020-8692
Published: November 12, 2020 / Updated: November 16, 2020
Vulnerability identifier: #VU48431
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-8692
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A local administrator can bypass implemented security restrictions, escalate privileges and cause a denial of service (DoS) condition on the target system.
Affected software
Intel Ethernet 700 Series Controller Software
F5OS
Dell EMC VxRail Appliance
Precision 7920 Rack
F5OS
Dell EMC VxRail Appliance
Precision 7920 Rack
How to mitigate CVE-2020-8692
Install updates from vendor's website.
Intel Ethernet 700 Series Controller Software - update to 7.3
Dell EMC VxRail Appliance - update to 7.0.203
Precision 7920 Rack - update to 20.0.17
Dell EMC VxRail Appliance - update to 7.0.203
Precision 7920 Rack - update to 20.0.17