← Vulnerability feed

Vulnerability record · CVE-2020-7207 · published 5 November 2020

CVE-2020-7207: Hp apollo 2000 firmware vulnerability

Hp · Apollo 2000 Firmware

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

6.8 CVSS 3.1 Medium EPSS 0.52% · top 57.8%
6.8CVSS 3.1 base score, v2 7.2
0.52%EPSS exploitation probability, 30 days
NoNot in CISA KEV
21Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

21 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_us Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04002en_us Vendor Advisory

Track CVE-2020-7207 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.5CVE-2019-11135Opensuse leap vulnerabilityTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information discl…EPSS 3.1%

Source: NIST National Vulnerability Database (record CVE-2020-7207), CISA KEV, FIRST EPSS (scores of 2026-10-01). This page is refreshed as NVD updates the record.