What’s Vulnerable › Vulnerabilities

CVE-2020-8709

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-13 · updated 2026-06-17
• Weakness: CWE-287

Description

Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Affected products

• Intel Compute Module Hns2600Bp Firmware: before 2.45 — fixed in 2.45
• Intel Compute Module Hns2600Kp Firmware: before 2.45 — fixed in 2.45
• Intel Compute Module Hns2600Tp Firmware: before 2.45 — fixed in 2.45
• Intel Compute Module S2600Tp Firmware: before 2.45 — fixed in 2.45
• Intel Server Board S1200Sp Firmware: before 2.45 — fixed in 2.45
• Intel Server Board S2600Bp Firmware: before 2.45 — fixed in 2.45
• Intel Server Board S2600Cw: before 2.45 — fixed in 2.45
• Intel Server Board S2600Kp Firmware: before 2.45 — fixed in 2.45
• Intel(R) Server Board S2600ST Family firmware: before 2.45 — fixed in 2.45
• Intel Server Board S2600Wf Firmware: before 2.45 — fixed in 2.45
• Intel Server Board S2600Wt Firmware: before 2.45 — fixed in 2.45
• Intel Server System Lr1304Sp Firmware: before 2.45 — fixed in 2.45
• Intel Server System Lsvrp Firmware: before 2.45 — fixed in 2.45
• Intel Server System R1000Sp Firmware: before 2.45 — fixed in 2.45
• Intel Server System R1000Wf Firmware: before 2.45 — fixed in 2.45
• Intel Server System R1000Wt Firmware: before 2.45 — fixed in 2.45
• Intel Server System R2000Wf Firmware: before 2.45 — fixed in 2.45
• Intel Server System R2000Wt Firmware: before 2.45 — fixed in 2.45

How to fix

Upgrade to a fixed version: Intel Compute Module Hns2600Bp Firmware 2.45; Intel Compute Module Hns2600Kp Firmware 2.45; Intel Compute Module Hns2600Tp Firmware 2.45; Intel Compute Module S2600Tp Firmware 2.45; Intel Server Board S1200Sp Firmware 2.45; Intel Server Board S2600Bp Firmware 2.45; Intel Server Board S2600Cw 2.45; Intel Server Board S2600Kp Firmware 2.45; Intel(R) Server Board S2600ST Family firmware 2.45; Intel Server Board S2600Wf Firmware 2.45; Intel Server Board S2600Wt Firmware 2.45; Intel Server System Lr1304Sp Firmware 2.45. Check the vendor advisory for mitigations.

References

• https://security.netapp.com/advisory/ntap-20200814-0002/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
• https://security.netapp.com/advisory/ntap-20200814-0002/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html

Get alerted when CVE-2020-8709 or the next vulnerability affects your stack