CVE-2020-12299

Published: Aug 13, 2020Modified: Jun 17, 2026

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (8)

Products: Intel: S2600stqr Firmware, S2600stbr Firmware, S2600bpsr Firmware, S2600bpbr Firmware, S2600bpqr Firmware, S2600wftr Firmware, S2600wf0r Firmware, S2600wfqr Firmware

8 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600stqr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600stqr	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600stbr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600stbr	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600bpsr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600bpsr	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600bpbr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600bpbr	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600bpqr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600bpqr	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wftr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600wftr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wf0r Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600wf0r	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wfqr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600wfqr	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://security.netapp.com/advisory/ntap-20200814-0001/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Source: secure@intel.com

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20200814-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.