Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

guest · Aug 11, 2020

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules
A critical privilege-escalation flaw
August 11, 2020
https://threatpost.com/critical-intel-flaw-motherboards-server-compute-modules/158270/

Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges.

The recently patched flaw (CVE-2020-8708) ranks 9.6 out of 10 on the CVSS scale, making it critical. Dmytro Oleksiuk, who discovered the flaw, told Threatpost that it exists in the firmware of Emulex Pilot 3. This baseboard-management controller is a service processor that monitors the physical state of a computer, network server or other hardware devices via specialized sensors.

The critical flaw stems from improper-authentication mechanisms in these Intel products before version 1.59.
Click to expand...

The flaw is dangerous as it’s remotely exploitable, and attackers don’t need to be authenticated to exploit it – though they need to be located in the same network segment as the vulnerable server, Oleksiuk told Threatpost.

“The exploit is quite simple and very reliable because it’s a design flaw,” Oleksiuk told Threatpost.
Click to expand...

Log in or Sign up

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

guest Guest

Log in or Sign up

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

guest Guest

Useful Searches