CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-8709
High (8.8) in intel. EPSS 0.7% chance of exploitation in the next 30 days.
Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:compute_module_hns2600bp_firmware
- intel:compute_module_hns2600kp_firmware
- intel:compute_module_hns2600tp_firmware
- intel:compute_module_s2600tp_firmware
- intel:server_board_s1200sp_firmware
- intel:server_board_s2600bp_firmware
- intel:server_board_s2600cw
- intel:server_board_s2600kp_firmware
- intel:server_board_s2600st_firmware
- intel:server_board_s2600wf_firmware
- intel:server_board_s2600wt_firmware
- intel:server_system_lr1304sp_firmware
- intel:server_system_lsvrp_firmware
- intel:server_system_r1000sp_firmware
- intel:server_system_r1000wf_firmware
- intel:server_system_r1000wt_firmware
- intel:server_system_r2000wf_firmware
- intel:server_system_r2000wt_firmware