BMC Firmware Vulnerability for Intel® Server Boards, Intel® Compute Modules, and Intel® Server Systems (INTEL-SA-00130)
The security of our products and our customers’ data is a top Intel priority. Product security updates are periodically delivered through a process of coordinated disclosure.
Intel has identified a security vulnerability that could potentially place affected platforms at risk.
The issue affects the BMC Firmware in Intel® Server Boards, Intel® Compute Modules, and Intel® Server Systems that could potentially allow an attacker with administrative privileges to make unauthorized read/writes to the SMBUS.
Affected products
Intel® Server Boards | Intel® Compute Modules | Intel® Server Systems |
BBS2600BPB | HNS2600BPB | R1304WF0YS |
BBS2600BPQ | HNS2600BPQ | R1304WFTYS |
BBS2600BPS | HNS2600BPS | R1208WFTYS |
S2600WFO | HNS2600BPB24 | R2308WFTZS |
S2600WFQ | HNS2600BPQ24 | R2208WF0ZS |
S2600WFT | HNS2600BPS24 | R2208WFTZS |
S2600STB | HNS2600BPBLC | R2208WFQZS |
S2600STQ | HNS2600BPBLC24 | R2312WF0NP |
BBS2600STB | HNS2600KPR | R2312WFTZS |
BBS2600STQ | HNS2600KPFR | R2312WFQZS |
S2600WT2R | HNS2600TPR | R2224WFQZS |
S2600WTTR | HNS2600TPFR | R2224WFTZS |
S2600WTTS1R | HNS2600TPNR | R1304WTTGSR |
DBS2600CW2R | HNS2600TP24R | R1304WT2GSR |
DBS2600CWTR | HNS2600TP24SR | R1208WTTGSR |
DBS2600CW2SR | HNS2600TP24STR | R1208WT2GSR |
DBS2600CWTSR | HNS7200APR | R2208WT2YSR |
S2600KPR | HNS7200APRL | R2208WTTYSR |
S2600KPFR | HNS7200AP | R2208WTTYC1R |
S2600KPTR | HNS7200APL | R2308WTTYSR |
S2600TPR | R2312WTTYSR | |
S2600TPFR | R2224WTTYSR | |
S2600TPTR | ||
S2600TPNR | ||
S7200APR | ||
BBS7200APL | ||
BBS7200AP |
Recommendations
Intel recommends that customers impacted by this Security Advisory upgrade to the latest firmware release for your specific platform as indicated in the list below.
For systems based on the Intel® Server Board S2600BP family, the platform firmware package is 00.01.0013:
For systems based on the Intel® Server Board S2600WF family, the platform firmware package is 00.01.0013:
For systems based on the Intel® Server Board S2600ST family, the platform firmware package is 00.01.0013:
For systems based on the Intel® Server Board S7200AP family, the platform firmware package is R01.03.0018:
For systems based on the Intel® Server Board S2600TP family, the platform firmware package is R01.01.0024:
For systems based on the Intel® Server Board S2600KP family, the platform firmware package is R01.01.0024:
For systems based on the Intel® Server Board S2600CW family, the platform firmware package is R01.01.0024:
For systems based on the Intel® Server Board S2600WT family, the platform firmware package is R01.01.0024:
View Intel Security Advisory INTEL-SA-00130.