8.8
HIGH
CVE-2020-8707
Intel Server Boards/Servers Compute Module Buffer Overflow Vulnerability
Description

Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

INFO

Published Date :

Aug. 13, 2020, 3:15 a.m.

Last Modified :

Nov. 21, 2024, 5:39 a.m.

Source :

[email protected]

Remotely Exploitable :

No

Impact Score :

5.9

Exploitability Score :

2.8
Affected Products

The following products are affected by CVE-2020-8707 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Intel server_board_s2600bp_firmware
2 Intel server_board_s2600wf_firmware
3 Intel server_board_s2600st_firmware
4 Intel compute_module_hns2600bp_firmware
5 Intel server_system_r2000wf_firmware
6 Intel server_system_r1000wf_firmware
7 Intel server_board_s2600kp_firmware
8 Intel server_board_s2600wt_firmware
9 Intel server_system_r1000wt_firmware
10 Intel server_system_r2000wt_firmware
11 Intel server_board_s2600cw
12 Intel compute_module_hns2600kp_firmware
13 Intel compute_module_hns2600tp_firmware
14 Intel compute_module_s2600tp_firmware
15 Intel server_board_s1200sp_firmware
16 Intel server_system_lr1304sp_firmware
17 Intel server_system_lsvrp_firmware
18 Intel server_system_r1000sp_firmware
19 Intel server_board_s2600bpbr
20 Intel server_board_s2600bps
21 Intel server_board_s2600bpsr
22 Intel server_board_s2600bpqr
23 Intel server_board_s2600bpb
24 Intel server_board_s2600bpq
25 Intel compute_module_hns2600bpblcr
26 Intel compute_module_hns2600bpblc
27 Intel compute_module_hns2600bpblc24r
28 Intel compute_module_hns2600bps
29 Intel compute_module_hns2600bps24
30 Intel compute_module_hns2600bpbr
31 Intel compute_module_hns2600bpqr
32 Intel compute_module_hns2600bpsr
33 Intel compute_module_hns2600bps24r
34 Intel compute_module_hns2600bpq24r
35 Intel compute_module_hns2600bpb24
36 Intel compute_module_hns2600bpb
37 Intel compute_module_hns2600bpblc24
38 Intel compute_module_hns2600bpq
39 Intel compute_module_hns2600bpq24
40 Intel server_system_mcb2208wfaf5
41 Intel server_board_s2600kp
42 Intel server_board_s2600tp
43 Intel server_board_s2600wt2
44 Intel server_board_s2600wt2r
45 Intel server_board_s2600wtt
46 Intel server_board_s2600wttr
47 Intel server_system_r1208wt2gs
48 Intel server_system_r1208wt2gsr
49 Intel server_system_r1208wttgs
50 Intel server_system_r1208wttgsbpp
51 Intel server_system_r1208wttgsr
52 Intel server_system_r1304wt2gs
53 Intel server_system_r1304wt2gsr
54 Intel server_system_r1304wttgs
55 Intel server_system_r1304wttgsr
56 Intel server_system_r2208wt2ys
57 Intel server_system_r2208wt2ysr
58 Intel server_system_r2208wttyc1
59 Intel server_system_r2208wttyc1r
60 Intel server_system_r2208wttys
61 Intel server_system_r2208wttysr
62 Intel server_system_r2224wttys
63 Intel server_system_r2224wttysr
64 Intel server_system_r2308wttys
65 Intel server_system_r2308wttysr
66 Intel server_system_r2312wttys
67 Intel server_system_r2312wttysr
68 Intel server_board_s2600cw2
69 Intel server_board_s2600cw2r
70 Intel server_board_s2600cw2s
71 Intel server_board_s2600cw2sr
72 Intel server_board_s2600cwt
73 Intel server_board_s2600cwtr
74 Intel server_board_s2600cwts
75 Intel server_board_s2600cwtsr
76 Intel compute_module_hns2600kp
77 Intel compute_module_hns2600kpf
78 Intel compute_module_hns2600kpfr
79 Intel compute_module_hns2600kpr
80 Intel server_board_s2600kpf
81 Intel server_board_s2600kpfr
82 Intel server_board_s2600kpr
83 Intel server_board_s2600kptr
84 Intel compute_module_hns2600tp
85 Intel compute_module_hns2600tp24r
86 Intel compute_module_hns2600tp24sr
87 Intel compute_module_hns2600tpf
88 Intel compute_module_hns2600tpfr
89 Intel compute_module_hns2600tpr
90 Intel server_board_s2600tpf
91 Intel server_board_s2600tpfr
92 Intel server_board_s2600tpr
93 Intel server_board_s1200spl
94 Intel server_board_s1200splr
95 Intel server_board_s1200spo
96 Intel server_board_s1200spor
97 Intel server_board_s1200sps
98 Intel server_board_s1200spsr
99 Intel server_system_lr1304spcfg1
100 Intel server_system_lr1304spcfg1r
101 Intel server_system_lr1304spcfsgx1
102 Intel server_system_lsvrp4304es6xx1
103 Intel server_system_lsvrp4304es6xxr
104 Intel server_system_r1208sposhor
105 Intel server_system_r1208sposhorr
106 Intel server_system_r1304sposhbn
107 Intel server_system_r1304sposhbnr
108 Intel server_system_r1304sposhor
109 Intel server_system_r1304sposhorr
110 Intel server_board_s2600wf0
111 Intel server_board_s2600wf0r
112 Intel server_board_s2600wfq
113 Intel server_board_s2600wfqr
114 Intel server_board_s2600wft
115 Intel server_board_s2600wftr
116 Intel server_system_lnetcnt3y
117 Intel server_system_mcb2208wfaf4
118 Intel server_system_mcb2208wfaf6
119 Intel server_system_mcb2208wfhy2
120 Intel server_system_nb2208wfqnfvi
121 Intel server_system_r1208wfqysr
122 Intel server_system_r1208wftys
123 Intel server_system_r1208wftysr
124 Intel server_system_r1304wf0ys
125 Intel server_system_r1304wf0ysr
126 Intel server_system_r1304wftys
127 Intel server_system_r1304wftysr
128 Intel server_system_r2208wf0zs
129 Intel server_system_r2208wf0zsr
130 Intel server_system_r2208wfqzs
131 Intel server_system_r2208wfqzsr
132 Intel server_system_r2208wftzs
133 Intel server_system_r2208wftzsr
134 Intel server_system_r2224wfqzs
135 Intel server_system_r2224wftzs
136 Intel server_system_r2224wftzsr
137 Intel server_system_r2308wftzs
138 Intel server_system_r2308wftzsr
139 Intel server_system_r2312wf0np
140 Intel server_system_r2312wf0npr
141 Intel server_system_r2312wfqzs
142 Intel server_system_r2312wftzs
143 Intel server_system_r2312wftzsr
144 Intel server_system_vrn2208waf6
145 Intel server_system_vrn2208wfaf81
146 Intel server_system_vrn2208wfaf82
147 Intel server_system_vrn2208wfaf83
148 Intel server_system_vrn2208wfhy6
149 Intel server_board_s2600stb
150 Intel server_board_s2600stbr
151 Intel server_board_s2600stq
152 Intel server_board_s2600stqr
153 Intel compute_module_hns2600bpb24r
: Total Affected Vendor : 1 | Products : 153
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-8707.

URL Resource
https://security.netapp.com/advisory/ntap-20200814-0002/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20200814-0002/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-8707 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-8707 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20200814-0002/
    Added Reference https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Aug. 19, 2020

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:A/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://security.netapp.com/advisory/ntap-20200814-0002/ No Types Assigned https://security.netapp.com/advisory/ntap-20200814-0002/ Third Party Advisory
    Changed Reference Type https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html No Types Assigned https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html Vendor Advisory
    Added CWE NIST CWE-120
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s2600wt_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s2600wt2:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wt2r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wtt:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wttr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_r1000wt_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_r1208wt2gs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wt2gsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wttgs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wttgsbpp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wttgsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wt2gs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wt2gsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wttgs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wttgsr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_r2000wt_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_r2208wt2ys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wt2ysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wttyc1:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wttyc1r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wttys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wttysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2224wttys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2224wttysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2308wttys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2308wttysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wttys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wttysr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s2600cw:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:a:intel:server_board_s2600cw2:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cw2r:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cw2s:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cw2sr:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cwt:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cwtr:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cwts:-:*:*:*:*:*:*:* cpe:2.3:a:intel:server_board_s2600cwtsr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:compute_module_hns2600kp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:compute_module_hns2600kp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600kpf:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600kpfr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600kpr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s2600kp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s2600kp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600kpf:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600kpfr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600kpr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600kptr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:compute_module_hns2600tp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:compute_module_hns2600tp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600tp24r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600tp24sr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600tpf:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600tpfr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600tpr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:compute_module_s2600tp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s2600tp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600tpf:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600tpfr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600tpr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s1200sp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s1200spl:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s1200splr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s1200spo:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s1200spor:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s1200sps:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s1200spsr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_lr1304sp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_lr1304spcfg1:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_lr1304spcfg1r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_lr1304spcfsgx1:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_lsvrp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_lsvrp4304es6xx1:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_lsvrp4304es6xxr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_r1000sp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_r1208sposhor:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208sposhorr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304sposhbn:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304sposhbnr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304sposhor:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304sposhorr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s2600wf_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s2600wf0:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wf0r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wfq:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wfqr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wft:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600wftr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_r1000wf_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_lnetcnt3y:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_mcb2208wfaf4:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_mcb2208wfaf5:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_mcb2208wfaf6:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_mcb2208wfhy2:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_nb2208wfqnfvi:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wfqysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wftys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1208wftysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wf0ys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wf0ysr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wftys:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r1304wftysr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_system_r2000wf_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_system_r2208wf0zs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wf0zsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wfqzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wfqzsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wftzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2208wftzsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2224wfqzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2224wftzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2224wftzsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2308wftzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2308wftzsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wf0np:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wf0npr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wfqzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wftzs:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_r2312wftzsr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_vrn2208waf6:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_vrn2208wfaf81:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_vrn2208wfaf82:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_vrn2208wfaf83:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_system_vrn2208wfhy6:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s2600st_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s2600stb:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600stbr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600stq:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600stqr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:compute_module_hns2600bp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:compute_module_hns2600bpb:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpb24:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpb24r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpblc:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpblc24:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpblc24r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpblcr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpbr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpq:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpq24:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpq24r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpqr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bps:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bps24:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bps24r:-:*:*:*:*:*:*:* cpe:2.3:h:intel:compute_module_hns2600bpsr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:server_board_s2600bp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.59 OR cpe:2.3:h:intel:server_board_s2600bpb:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600bpbr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600bpq:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600bpqr:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600bps:-:*:*:*:*:*:*:* cpe:2.3:h:intel:server_board_s2600bpsr:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Aug. 14, 2020

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20200814-0002/ [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-8707 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-8707 weaknesses.

CAPEC-8: Buffer Overflow in an API Call Buffer Overflow in an API Call CAPEC-9: Buffer Overflow in Local Command-Line Utilities Buffer Overflow in Local Command-Line Utilities CAPEC-10: Buffer Overflow via Environment Variables Buffer Overflow via Environment Variables CAPEC-14: Client-side Injection-induced Buffer Overflow Client-side Injection-induced Buffer Overflow CAPEC-24: Filter Failure through Buffer Overflow Filter Failure through Buffer Overflow CAPEC-42: MIME Conversion MIME Conversion CAPEC-44: Overflow Binary Resource File Overflow Binary Resource File CAPEC-45: Buffer Overflow via Symbolic Links Buffer Overflow via Symbolic Links CAPEC-46: Overflow Variables and Tags Overflow Variables and Tags CAPEC-47: Buffer Overflow via Parameter Expansion Buffer Overflow via Parameter Expansion CAPEC-67: String Format Overflow in syslog() String Format Overflow in syslog() CAPEC-92: Forced Integer Overflow Forced Integer Overflow CAPEC-100: Overflow Buffers Overflow Buffers
Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.08 }} 0.01%

score

0.31600

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: