high
8.8
CWE
120 119
Advisory Published
Updated

CVE-2020-8707: Buffer Overflow

First published: Thu Aug 13 2020(Updated: )

Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel Server Board S2600WT Firmware<1.59
Intel Server Board s2600wt2 firmware
Intel Server Board S2600WT2R firmware
Intel S2600WTT
Intel Server Board S2600WTTR Firmware
Intel Server System R1000WT Firmware<1.59
Intel Server System R1208WT2GSR
Intel Server System R1208WT2GS
Intel Server System r1208wttgsr
Intel Server System R1208WTTGSBPP
Intel R1208WTTSR
Intel Server System r1304wt2gsr
Intel Server System R1304WT2GSR
Intel Server System R1304WTTGS
Intel Server System R1304WTTGSR
Intel Server System R2000WT Firmware<1.59
Intel Server System R2208WT2YSR
Intel Server System R2208WT2YSR
Intel Server System R2208WTTY
Intel Server System R2208WTTY
Intel Server System R2208WT2YS
Intel Server System R2208WTTYS
Intel Server System R2224WTTYS
Intel Server System R2224WTTYSR
Intel Server System R2308WTTYS
Intel Server System r2308wttys
Intel Server System R2312WTTYS
Intel Server System R2312WTTYSR
Intel S2600CW<1.59
Intel Server Board S2600CW2 Firmware
Intel DBS2600CW2R
Intel Server Board S2600CW2S Firmware
Intel DB S2600CW2SR
Intel Server Board S2600CWT Firmware
Intel D71 DBS2600CWTR
Intel S2600CWTS Firmware
Intel S2600CWTSR Firmware
Intel Compute Module hns2600kp firmware<1.59
Intel Compute Module hns2600kp firmware
Intel Compute Module hns2600kpf
Intel Compute Module hns2600kpfr
Intel Compute Module HNS2600
Intel S2600KP Firmware<1.59
Intel Server Board S2600KPFR
Intel Server Board S2600KPF Firmware
Intel S2600KPFR Firmware
Intel Server Board S2600KPR Firmware
Intel Server Board S2600KPTR Firmware
Intel Compute Module hns2600tp firmware<1.59
Intel Compute Module hns2600tp firmware
Intel Compute Module HNS2600TP24R
Intel HNS2600TP24SR
Intel Compute Module hns2600tpfr
Intel Compute Module HNS2600
Intel Compute Module HNS2600
Intel Compute Module S2600TP Firmware<1.59
Intel Server Board S2600TP Firmware
Intel S2600TPF
Intel Server Board S2600TPFR Firmware
Intel Server Board S2600TPR Firmware
Intel Server Board S1200SP Firmware<1.59
Intel S1200SPL
Intel S1200SPLR BIOS
Intel Server Board S1200SP
Intel S1200SPOR BIOS
Intel S1200SPS
Intel S1200SPSR
Intel Server System LR1304SP<1.59
Intel Server System LR1304SPCFG1R
Intel Server System LR1304SPCFG1R
Intel Server System LR1304SPCFSGX1
Intel Server System lsvrp firmware<1.59
Intel Server System lsvrp4304es6xx1
Intel Server System lsvrp4304es6xxr
Intel Server System r1000sp firmware<1.59
Intel R1208SPOSHORR
Intel Server System R1208SPOSHOR
Intel Server System R1304SPOSHB
Intel Server System R1304SPOSHBnR
Intel Server System R1304SPOSHOR
Intel Server System R1304SPOSHORR
Intel Server Board S2600WF0R<1.59
Intel S2600WF Series
Intel S2600WF0
Intel S2600WFQ
Intel S2600WFQR Firmware
Intel S2600WFT
Intel S2600WFTR
Intel R1000WF Firmware<1.59
Intel Server System
Intel Server System MCB2208WFAF4
Intel Server System mcb2208wfaf5 firmware
Intel Server System MCB2208WF-AF6
Intel Server System mcb2208wfhy2
Intel Server System nb2208wfqnfvi
Intel HPCR1208WFQYSR
Intel HPCR1208WFTYSR
Intel HPCR1208WFTYSR
Intel Server System R1304WF0YS
Intel Server System R1304WF0YSR
Intel Server System R1304WFTYSR
Intel Server System R1304WFTYS
Intel Server System R2000WF Firmware<1.59
Intel Server System R2208
Intel hpcr2208wf0zsr
Intel R2208WFQZ
Intel R2208WFQZ
Intel Server System R2208WF TZS
Intel Server System R2208WFTZSR
Intel Server System R2224WFQZS
Intel R2224WFTZS
Intel hpcr2224wftzsr
Intel Server System R2308WFTZSR
Intel R2308WFTZSR
Intel Server System R2312WF0NP
Intel Server System R2312WF0NPR
Intel R2312WFQZS
Intel hpcr2312wftzsr
Intel Server System R2312WFTZSR
Intel Server System VRN2208WAF6
Intel Server System VRN2208WFAF81
Intel Server System VRN2208WFAF82
Intel Server System VRN2208WFAF83
Intel Server System VRN2208WFHY6
Intel Server Board S2600ST Firmware<1.59
Intel BBS2600STB
Intel S2600STBR Firmware
Intel S2600STQ
Intel BBS2600STQR
Intel Compute Module hns2600bp firmware<1.59
Intel Compute Module hns2600bpb firmware
Intel Compute Module HNS2600BPB24 Firmware
Intel Compute Module HNS2600BPB24R Firmware
Intel Compute Module hns2600bpblc
Intel compute module hns2600bpblc24 firmware
Intel Compute Module HNS2600BPBL-C24R Firmware
Intel Compute Module HNS2600BPBLCR Firmware
Intel Compute Module HNS2600
Intel Compute Module hns2600bpq
Intel Compute Module HNS2600BPQ24 Firmware
Intel compute module hns2600bpq24r firmware
Intel Compute Module HNS2600
Intel Compute Module HNS2600BPS
Intel Compute Module HNS2600BPS24 Firmware
Intel Compute Module HNS2600BPS24R Firmware
Intel Compute Module hns2600bpsr
Intel S2600BP Firmware<1.59
Intel Server Board S2600BPB Firmware
Intel S2600BPBR Firmware
Intel Server Board S2600BPQ
Intel S2600BPQR Firmware
Intel Server Board S2600BPS Firmware
Intel Server Board S2600BPSR Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2020-8707?

    CVE-2020-8707 has a high severity level due to the potential for privilege escalation by an unauthenticated user.

  • How do I fix CVE-2020-8707?

    To mitigate CVE-2020-8707, update the firmware for affected Intel Server Boards, Systems, and Compute Modules to version 1.59 or later.

  • What systems are affected by CVE-2020-8707?

    CVE-2020-8707 affects various Intel Server Boards, Server Systems, and Compute Modules that are running firmware prior to version 1.59.

  • What type of vulnerability is CVE-2020-8707?

    CVE-2020-8707 is a buffer overflow vulnerability that could allow unauthorized privilege escalation.

  • Can CVE-2020-8707 be exploited remotely?

    CVE-2020-8707 requires adjacent access, meaning it cannot be exploited remotely without physical access to the affected systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203