CVE-2020-8687

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Aug 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-86887.5Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of CVE-2020-86896.5Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially en CVE-2020-86906.7Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enabl CVE-2020-86916.7A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation o CVE-2020-86926.7Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user t CVE-2020-86936.7Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enab CVE-2020-86945.5Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable in CVE-2020-86955.5Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disc CVE-2020-86965.5Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentia CVE-2020-86985.5Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclos CVE-2020-87006.7Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privi CVE-2020-87016.7Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially