{"id":"CVE-2020-8709","aliases":["EUVD-2020-29557","GHSA-8g3g-hg93-mm82"],"status":"published","title":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and...","description":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00664,"percentile":0.52021,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2020-08-13T02:52:30Z","modified":"2026-06-17T03:26:48Z","products":[{"vendor":"intel","product":"compute_module_hns2600bp_firmware"},{"vendor":"intel","product":"compute_module_hns2600kp_firmware"},{"vendor":"intel","product":"compute_module_hns2600tp_firmware"},{"vendor":"intel","product":"compute_module_s2600tp_firmware"},{"vendor":"intel","product":"server_board_s1200sp_firmware"},{"vendor":"intel","product":"server_board_s2600bp_firmware"},{"vendor":"intel","product":"server_board_s2600cw"},{"vendor":"intel","product":"server_board_s2600kp_firmware"},{"vendor":"intel","product":"server_board_s2600st_firmware"},{"vendor":"intel","product":"server_board_s2600wf_firmware"},{"vendor":"intel","product":"server_board_s2600wt_firmware"},{"vendor":"intel","product":"server_system_lr1304sp_firmware"},{"vendor":"intel","product":"server_system_lsvrp_firmware"},{"vendor":"intel","product":"server_system_r1000sp_firmware"},{"vendor":"intel","product":"server_system_r1000wf_firmware"},{"vendor":"intel","product":"server_system_r1000wt_firmware"},{"vendor":"intel","product":"server_system_r2000wf_firmware"},{"vendor":"intel","product":"server_system_r2000wt_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200814-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8709"},{"url":"https://github.com/advisories/GHSA-8g3g-hg93-mm82"}],"sources":{"cve":[{"id":"CVE-2020-8709","description":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2020-08-13T02:52:30Z","modified":"2024-08-04T10:03:46.375Z","updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-29557","description":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2020-08-13T02:52:30Z","modified":"2024-08-04T10:03:46Z","updated_at":"2026-11-03T03:07:56.602123Z"}],"ghsa":[{"id":"GHSA-8g3g-hg93-mm82","title":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and...","description":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2022-05-24T17:25:39Z","modified":"2023-01-29T05:03:33Z","updated_at":"2026-11-02T14:45:20.937669Z"}],"nvd":[{"id":"CVE-2020-8709","description":"Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.","status":"published","published":"2020-08-13T03:15:15.18Z","modified":"2026-06-17T03:26:48.723Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}
