Intel Server Board/Server System/Compute Module up to 1.58 Access Control denial of service

Summaryinfo

A vulnerability, which was classified as problematic, was found in Intel Server Board, Server System and Compute Module up to 1.58. This issue affects some unknown processing of the component Access Control. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2020-8716. Local access is required to approach this attack. No exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Intel Server Board, Server System and Compute Module up to 1.58 (Forum Software). It has been rated as problematic. Affected by this issue is some unknown functionality of the component Access Control. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability. CVE summarizes:

Improper access control for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access.

The weakness was disclosed 08/13/2020 (Website). The advisory is shared for download at intel.com. This vulnerability is handled as CVE-2020-8716 since 02/06/2020. The attack needs to be approached locally. A simple authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

Upgrading to version 1.59 eliminates this vulnerability.

The entries VDB-159802, VDB-159803, VDB-159804 and VDB-159805 are pretty similar. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Forum Software

Vendor

• Intel

Name

• Compute Module
• Server Board
• Server System

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.40
• 1.41
• 1.42
• 1.43
• 1.44
• 1.45
• 1.46
• 1.47
• 1.48
• 1.49
• 1.50
• 1.51
• 1.52
• 1.53
• 1.54
• 1.55
• 1.56
• 1.57
• 1.58

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion