Intel Server Board s2600st Firmware vulnerabilities

28 CVEs affecting Intel Server Board s2600st Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36282, published 2024-11-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8732, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation…
CVE-2020-8707, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8706, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8713, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8709, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation…
CVE-2020-8708, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2020-8723, published 2020-08-13. Medium severity, CVSS 6.3. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
CVE-2019-0119, published 2019-05-17. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute…
CVE-2018-12173, published 2018-10-10. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially…
CVE-2020-8718, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege…

Latest

CVE-2024-36282, published 2024-11-13. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via…
CVE-2024-34167, published 2024-11-13. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via…
CVE-2024-28947, published 2024-08-14. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of…
CVE-2020-0572, published 2020-11-12. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2020-8720, published 2020-08-13. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local…
CVE-2020-8731, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially…
CVE-2020-8730, published 2020-08-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local…
CVE-2020-8729, published 2020-08-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of…