CVE-2020-8711: Intel Compute Module HNS2600BP Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

• Intel Compute Module HNS2600BP Firmware: before 2.45 (fixed in 2.45)
• Intel Compute Module HNS2600KP Firmware: before 2.45 (fixed in 2.45)
• Intel Compute Module HNS2600TP Firmware: before 2.45 (fixed in 2.45)
• Intel Compute Module s2600tp Firmware: before 2.45 (fixed in 2.45)
• Intel Server Board s1200sp Firmware: before 2.45 (fixed in 2.45)
• Intel Server Board s2600bp Firmware: before 2.45 (fixed in 2.45)
• Intel Server Board s2600cw: before 2.45 (fixed in 2.45)
• Intel Server Board s2600kp Firmware: before 2.45 (fixed in 2.45)
• Intel Server Board s2600st Firmware: before 2.45 (fixed in 2.45)
• Intel Server Board s2600wf Firmware: before 2.45 (fixed in 2.45)
• Intel Server Board s2600wt Firmware: before 2.45 (fixed in 2.45)
• Intel Server System LR1304SP Firmware: before 2.45 (fixed in 2.45)
• Intel Server System Lsvrp Firmware: before 2.45 (fixed in 2.45)
• Intel Server System r1000sp Firmware: before 2.45 (fixed in 2.45)
• Intel Server System r1000wf Firmware: before 2.45 (fixed in 2.45)
• Intel Server System r1000wt Firmware: before 2.45 (fixed in 2.45)
• Intel Server System r2000wf Firmware: before 2.45 (fixed in 2.45)
• Intel Server System r2000wt Firmware: before 2.45 (fixed in 2.45)

Published 2020-08-13. Last modified 2026-06-17.