CVE-2020-12299

HIGH

Intel S2600ST/S2600BP/S2600WF BIOS < 02.01.0012 Privilege Escalation via Input Validation

Title source: llm

Description

Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00367.html

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20200814-0001/

Scores

CVSS v3 8.2

EPSS 0.0006

EPSS Percentile 19.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (8)

intel/s2600bpbr_firmware < 02.01.0012

intel/s2600bpqr_firmware < 02.01.0012

intel/s2600bpsr_firmware < 02.01.0012

intel/s2600stbr_firmware < 02.01.0012

intel/s2600stqr_firmware < 02.01.0012

intel/s2600wf0r_firmware < 02.01.0012

intel/s2600wfqr_firmware < 02.01.0012

intel/s2600wftr_firmware < 02.01.0012

Published Aug 13, 2020

Tracked Since Feb 18, 2026