CVE-2020-7207

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_usVendor Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_usVendor Advisory

Published

Nov 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7200A potential security vulnerability has been identified in HP…9.8
• CVE-2020-7201A potential security vulnerability has been identified in th…8.8
• CVE-2020-7202A potential security vulnerability has been identified in HP…5.3
• CVE-2020-7203A potential security vulnerability has been identified in HP…9.8
• CVE-2020-7205A potential security vulnerability has been identified in HP…6.7
• CVE-2020-7206HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and ear…9.8
• CVE-2020-7208LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is …6.1
• CVE-2020-7209LinuxKI v6.0-1 and earlier is vulnerable to an remote code e…9.8
• CVE-2020-7210Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete us…4.3
• CVE-2020-7211tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not pr…7.5
• CVE-2020-7212The _encode_invalid_chars function in util/url.py in the url…7.5
• CVE-2020-7213Parallels 13 uses cleartext HTTP as part of the update proce…7.5