CVE-2020-8716

Vulnerability

Improper access control vulnerability in some Intel(R) Server Boards, Server Systems, and Compute Modules before version 1.59 exists due to insufficient access controls on privileged functions. This affects firmware versions prior to 1.59. The vulnerability requires an authenticated user with local access to the system. [1]

Exploitation

An authenticated user with local access can exploit this vulnerability by leveraging insufficient access controls to trigger a denial of service condition. The user must have valid credentials and physical or remote local access to the affected system. No additional privileges are needed beyond authentication. [1]

Impact

Successful exploitation allows the attacker to cause a denial of service, potentially rendering the system unavailable. The impact is limited to availability (A) with no impact on confidentiality or integrity as per the description. [1]

Mitigation

Intel has released firmware version 1.59 to address this vulnerability. Users should update their systems to version 1.59 or later. No workarounds are available. The advisory does not list this CVE as being exploited in the wild or added to the KEV catalog. [1]