Sign-up

ID

VAR-202008-1134


CVE

CVE-2020-8688


TITLE

Windows for Intel(R) RAID Web Console 3 Input verification vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2020-009493

DESCRIPTION

Improper input validation in the Intel(R) RAID Web Console 3 for Windows* may allow an unauthenticated user to potentially enable denial of service via network access. Intel RAID Web Console 3 (RWC3) is a web-based application program of Intel Corporation that provides monitoring, maintenance, troubleshooting and configuration functions for Intel RAID products. A remote attacker can exploit this vulnerability by sending a malicious POST request to cause the LSA.exe service to exit, resulting in a denial of service

Trust: 1.71

sources: NVD: CVE-2020-8688 // JVNDB: JVNDB-2020-009493 // VULHUB: VHN-186813

AFFECTED PRODUCTS

vendor:intelmodel:raid web console 3scope:ltversion:7.012.016.000

Trust: 1.0

vendor:intelmodel:raid web consolescope:eqversion:3

Trust: 0.8

sources: JVNDB: JVNDB-2020-009493 // NVD: CVE-2020-8688

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-8688
value: HIGH

Trust: 1.0

NVD: JVNDB-2020-009493
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202003-1520
value: HIGH

Trust: 0.6

VULHUB: VHN-186813
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-8688
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

NVD: JVNDB-2020-009493
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-186813
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-8688
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: JVNDB-2020-009493
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-186813 // JVNDB: JVNDB-2020-009493 // CNNVD: CNNVD-202003-1520 // NVD: CVE-2020-8688

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-186813 // JVNDB: JVNDB-2020-009493 // NVD: CVE-2020-8688

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202003-1520

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202003-1520

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2020-009493

PATCH
title:INTEL-SA-00378url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00378.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2020-009493

EXTERNAL IDS
db:NVDid:CVE-2020-8688
Trust: 2.5
db:JVNid:JVNVU99606488
Trust: 0.8
db:JVNDBid:JVNDB-2020-009493
Trust: 0.8
db:CNNVDid:CNNVD-202003-1520
Trust: 0.7
db:NSFOCUSid:49022
Trust: 0.6
db:TALOSid:TALOS-2019-0914
Trust: 0.6
db:CNVDid:CNVD-2020-23205
Trust: 0.1
db:VULHUBid:VHN-186813
Trust: 0.1
sources:
            
            
            VULHUB: VHN-186813 // 
            
            
            
            JVNDB: JVNDB-2020-009493 // 
            
            
            
            CNNVD: CNNVD-202003-1520 // 
            
            
            
            NVD: CVE-2020-8688

REFERENCES
url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00378.html
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2020-8688
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-8688
Trust: 0.8
url:https://jvn.jp/vu/jvnvu99606488
Trust: 0.8
url:http://www.nsfocus.net/vulndb/49022
Trust: 0.6
url:https://talosintelligence.com/vulnerability_reports/talos-2019-0914
Trust: 0.6
sources:
            
            
            VULHUB: VHN-186813 // 
            
            
            
            JVNDB: JVNDB-2020-009493 // 
            
            
            
            CNNVD: CNNVD-202003-1520 // 
            
            
            
            NVD: CVE-2020-8688

CREDITS
Geoff Serrao and Cory Duplantis of Cisco Talos
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-202003-1520

SOURCES
db:VULHUBid:VHN-186813
db:JVNDBid:JVNDB-2020-009493
db:CNNVDid:CNNVD-202003-1520
db:NVDid:CVE-2020-8688

LAST UPDATE DATE
2024-11-23T21:35:21.117000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-186813date:2020-08-19T00:00:00
db:JVNDBid:JVNDB-2020-009493date:2020-11-10T06:27:07
db:CNNVDid:CNNVD-202003-1520date:2020-09-23T00:00:00
db:NVDid:CVE-2020-8688date:2024-11-21T05:39:15.320

SOURCES RELEASE DATE
db:VULHUBid:VHN-186813date:2020-08-13T00:00:00
db:JVNDBid:JVNDB-2020-009493date:2020-11-10T06:27:07
db:CNNVDid:CNNVD-202003-1520date:2020-03-24T00:00:00
db:NVDid:CVE-2020-8688date:2020-08-13T04:15:13.930