CVE-2020-7207: High severity hpe apollo 2000 firmware vulnerability
A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this HPE Proliant Gen10 Server vulnerability?
The vulnerability ID for this HPE Proliant Gen10 Server vulnerability is CVE-2020-7207.
What is the severity level of CVE-2020-7207?
The severity level of CVE-2020-7207 is high.
How does CVE-2020-7207 impact HPE Proliant Gen10 Servers?
CVE-2020-7207 is a local elevation of privilege vulnerability that requires physical access to the server motherboard.
How can I mitigate CVE-2020-7207 on my HPE Proliant Gen10 Server?
To mitigate CVE-2020-7207, ensure that your HPE Proliant Gen10 Server is physically secured.
Where can I find more information about CVE-2020-7207?
You can find more information about CVE-2020-7207 in the official HPE advisory: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_us