Intel Compute Module HNS2600BP Firmware vulnerabilities

24 CVEs affecting Intel Compute Module HNS2600BP Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29510, published 2023-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8732, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation…
CVE-2020-8707, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8706, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8713, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8709, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation…
CVE-2020-8708, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8723, published 2020-08-13. Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2018-12173, published 2018-10-10. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially…
CVE-2020-8718, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege…
CVE-2020-8722, published 2020-08-13. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via…

Latest

CVE-2022-29510, published 2023-11-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-8720, published 2020-08-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local…
CVE-2020-8731, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially…
CVE-2020-8730, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local…
CVE-2020-8729, published 2020-08-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of…
CVE-2020-8721, published 2020-08-13. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local…
CVE-2020-8719, published 2020-08-13. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via…