{"id":"CVE-2020-8729","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-8729","generatedAt":"2026-10-27T23:26:37.855Z","title":"Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.","description":"Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.","published":"2020-08-13T03:15:16.000Z","lastModified":"2026-06-17T03:26:51.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-120"],"affected":["intel/server board s2600wt firmware","intel/server system r1000wt firmware","intel/server system r2000wt firmware","intel/server board s2600cw","intel/compute module hns2600kp firmware","intel/server board s2600kp firmware","intel/compute module hns2600tp firmware","intel/compute module s2600tp firmware","intel/server board s1200sp firmware","intel/server system lr1304sp firmware","intel/server system lsvrp firmware","intel/server system r1000sp firmware","intel/server board s2600wf firmware","intel/server system r1000wf firmware","intel/server system r2000wf firmware","intel/server board s2600st firmware","intel/compute module hns2600bp firmware","intel/server board s2600bp firmware"],"epss":{"score":0.00348,"percentile":0.28142,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://security.netapp.com/advisory/ntap-20200814-0002/","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html","tags":["Vendor Advisory"],"source":"secure@intel.com"},{"url":"https://security.netapp.com/advisory/ntap-20200814-0002/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-8729","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}