CVE-2020-12301

Published: Aug 13, 2020Modified: Jun 17, 2026

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (8)

Products: Intel: S2600wftr Firmware, S2600wf0r Firmware, S2600wfqr Firmware, S2600bpsr Firmware, S2600bpbr Firmware, S2600bpqr Firmware, S2600stqr Firmware, S2600stbr Firmware

8 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wftr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600wftr	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wf0r Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600wf0r	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600wfqr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600wfqr	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600bpsr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600bpsr	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600bpbr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600bpbr	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600bpqr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600bpqr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600stqr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600stqr	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel S2600stbr Firmware	Before 02.01.0012

Running on/with	Platform Versions
Intel S2600stbr	All versions

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (4)

https://security.netapp.com/advisory/ntap-20200814-0001/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Source: secure@intel.com

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20200814-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.