Protection Mechanism Failure in Intel Ethernet 700 Series Controller Software - CVE-2020-8690
Published: November 12, 2020 / Updated: November 16, 2020
Vulnerability identifier: #VU48432
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-8690
CWE-ID: CWE-693
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures. A local administrator can bypass implemented security restrictions, elevate privileges on the system and cause a denial of service (DoS) condition.
Affected software
Intel Ethernet 700 Series Controller Software
F5OS
Dell EMC VxRail Appliance
Precision 7920 Rack
F5OS
Dell EMC VxRail Appliance
Precision 7920 Rack
How to mitigate CVE-2020-8690
Install updates from vendor's website.
Intel Ethernet 700 Series Controller Software - update to 7.3
Dell EMC VxRail Appliance - update to 7.0.203
Precision 7920 Rack - update to 20.0.17
Dell EMC VxRail Appliance - update to 7.0.203
Precision 7920 Rack - update to 20.0.17