CVE-2020-12301
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
12.6%
Improper initialization in BIOS firmware for Intel® Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | s2600wftr_firmware | * | cpe:2.3:o:intel:s2600wftr_firmware:*:*:*:*:*:*:*:* |
| intel | s2600wftr | - | cpe:2.3:h:intel:s2600wftr:-:*:*:*:*:*:*:* |
| intel | s2600wf0r_firmware | * | cpe:2.3:o:intel:s2600wf0r_firmware:*:*:*:*:*:*:*:* |
| intel | s2600wf0r | - | cpe:2.3:h:intel:s2600wf0r:-:*:*:*:*:*:*:* |
| intel | s2600wfqr_firmware | * | cpe:2.3:o:intel:s2600wfqr_firmware:*:*:*:*:*:*:*:* |
| intel | s2600wfqr | - | cpe:2.3:h:intel:s2600wfqr:-:*:*:*:*:*:*:* |
| intel | s2600bpsr_firmware | * | cpe:2.3:o:intel:s2600bpsr_firmware:*:*:*:*:*:*:*:* |
| intel | s2600bpsr | - | cpe:2.3:h:intel:s2600bpsr:-:*:*:*:*:*:*:* |
| intel | s2600bpbr_firmware | * | cpe:2.3:o:intel:s2600bpbr_firmware:*:*:*:*:*:*:*:* |
| intel | s2600bpbr | - | cpe:2.3:h:intel:s2600bpbr:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
12.6%