CVE-2020-12300

Published: Aug 13, 2020Modified: Jun 17, 2026

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (23)

Products: Intel: S2600cw2 Firmware, S2600cw2s Firmware, S2600cwt Firmware, S2600cwts Firmware, S2600cw2r Firmware, S2600cw2sr Firmware, S2600cwtr Firmware, S2600cwtsr Firmware, S2600kp Firmware, S2600kpf Firmware, S2600kpr Firmware, S2600kpfr Firmware, S2600kptr Firmware, S2600tp Firmware, S2600tpf Firmware, S2600tpfr Firmware, S2600tpnr Firmware, S2600tpr Firmware, S2600wt2 Firmware, S2600wtt Firmware, S2600wttr Firmware, S2600wt2r Firmware, S2600wtts1r Firmware

23 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cw2 Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cw2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cw2s Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cw2s	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cwt Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cwt	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cwts Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cwts	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cw2r Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cw2r	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cw2sr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cw2sr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cwtr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cwtr	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600cwtsr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600cwtsr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600kp Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600kp	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600kpf Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600kpf	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600kpr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600kpr	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600kpfr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600kpfr	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600kptr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600kptr	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600tp Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600tp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600tpf Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600tpf	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600tpfr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600tpfr	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600tpnr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600tpnr	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600tpr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600tpr	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wt2 Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600wt2	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wtt Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600wtt	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wttr Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600wttr	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wt2r Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600wt2r	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wtts1r Firmware	Before 01.01.0029

Running on/with	Platform Versions
Intel S2600wtts1r	All versions

Related CWEs

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (4)

https://security.netapp.com/advisory/ntap-20200814-0001/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Source: secure@intel.com

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20200814-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.