CVE-2020-8715

Vulnerability

An invalid pointer vulnerability exists in the firmware of certain Intel Server Boards, Server Systems, and Compute Modules prior to version 1.59 [1]. The issue occurs when an unauthenticated user with local access triggers a specific code path that mishandles a pointer, leading to a system crash or hang.

Exploitation

An attacker must have local access to the affected system. No authentication is required. The attacker can exploit the vulnerability by executing a specially crafted sequence of operations that triggers the invalid pointer dereference, resulting in a denial of service condition.

Impact

Successful exploitation allows an unauthenticated local attacker to cause a denial of service, potentially rendering the system unavailable until a reboot. The impact is limited to availability; no data confidentiality or integrity compromise is indicated.

Mitigation

Intel has released firmware version 1.59 to address this vulnerability [1]. Users should update their systems to this version or later. No workarounds are documented. The affected products include various Intel Server Boards, Server Systems, and Compute Modules; consult the Intel advisory for the full list.