CVE-2020-12374

🗓️ 19 Feb 2021 15:17:24Reported by intelType

Buffer overflow in Intel Server Boards BMC firmware pre-ver 2.47 may allow privileged user escalation via local access

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-12374	19 Feb 202118:51	–	circl
CNNVD	Multiple Intel Server System Product Buffer Error Vulnerabilities	19 Feb 202100:00	–	cnnvd
Cvelist	CVE-2020-12374	19 Feb 202115:17	–	cvelist
EUVD	EUVD-2020-4686	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	9 Feb 202100:00	–	intel
NVD	CVE-2020-12374	19 Feb 202116:15	–	nvd
Prion	Buffer overflow	19 Feb 202116:15	–	prion
RedhatCVE	CVE-2020-12374	9 Jan 202609:57	–	redhatcve

NVD

Node

intel bmc_firmwareRange<2.47

AND

intel hns2600bpbMatch-

intel hns2600bpb24Match-

intel hns2600bpb24rMatch-

intel hns2600bpblcMatch-

intel hns2600bpblc24Match-

intel hns2600bpblc24rMatch-

intel hns2600bpbrMatch-

intel hns2600bpqMatch-

intel hns2600bpq24Match-

intel hns2600bpq24rMatch-

intel hns2600bpqrMatch-

intel hns2600bpsMatch-

intel hns2600bps24Match-

intel hns2600bps24rMatch-

intel hns2600bpsrMatch-

intel r1000wfMatch-

intel r1208wfqysrMatch-

intel r1208wftysMatch-

intel r1208wftysrMatch-

intel r1304wf0ysMatch-

intel r1304wf0ysrMatch-

intel r1304wftysMatch-

intel r1304wftysrMatch-

intel r2208wf0zsMatch-

intel r2208wf0zsrMatch-

intel r2208wfqzsMatch-

intel r2208wfqzsrMatch-

intel r2208wftzsMatch-

intel r2208wftzsrMatch-

intel r2224wfqzsMatch-

intel r2224wftzsMatch-

intel r2224wftzsrMatch-

intel r2308wftzsMatch-

intel r2308wftzsrMatch-

intel r2312wf0npMatch-

intel r2312wf0nprMatch-

intel r2312wfqzsMatch-

intel r2312wftzsMatch-

intel r2312wftzsrMatch-

intel s2600bpbrMatch-

intel s2600bpqrMatch-

intel s2600bpsrMatch-

intel s2600stbMatch-

intel s2600stqMatch-

intel s2600wf0Match-

intel s2600wfqMatch-

intel s2600wftMatch-

[
  {
    "product": "Intel(R) Server Boards, Server Systems and Compute Modules",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 2.47"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

21 Nov 2024 04:59Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.6

CVSS 3.16.7

EPSS0.0008

CWE-120