CVE-2020-7207

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE)

published November 5, 2020

CVSS
—
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.4th percentile
Published
2020-11-05T20:14Z
EPSS history
Timeline
  • 05 NOV 20:14Z
    A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE)
    cvelistv5