VulnerabilityModified
CVE-2020-8723
Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
MEDIUM 6.3EPSS 0.61%
Does this matter?
Lower severity and a low EPSS score (0.61%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
- CVSS 3.1
- 6.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
- EPSS
- 0.61% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- intel/server board s2600wt firmware · intel/server system r1000wt firmware · intel/server system r2000wt firmware · intel/server board s2600cw · intel/compute module hns2600kp firmware · intel/server board s2600kp firmware · intel/compute module hns2600tp firmware · intel/compute module s2600tp firmware · intel/server board s1200sp firmware · intel/server system lr1304sp firmware · intel/server system lsvrp firmware · intel/server system r1000sp firmware · intel/server board s2600wf firmware · intel/server system r1000wf firmware · intel/server system r2000wf firmware · intel/server board s2600st firmware · intel/compute module hns2600bp firmware · intel/server board s2600bp firmware
- Source
- secure@intel.com
References
- https://security.netapp.com/advisory/ntap-20200814-0002/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.htmlVendor Advisory
- https://security.netapp.com/advisory/ntap-20200814-0002/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.