CVE-2020-12376

🗓️ 17 Feb 2021 13:56:08Reported by intelType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 44 Views

Use of hard-coded key in Intel(R) Server BMC firmware v2.4

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, which stems from the use of rigidly encrypted credentials, allows attackers to gain unauthorized access to protected information.	16 Feb 202100:00	–	bdu_fstec
CNNVD	多款 Intel BMC 固件信任管理问题漏洞	10 Feb 202100:00	–	cnnvd
CNVD	Multiple Intel® Server Information Disclosure Vulnerabilities	18 Feb 202100:00	–	cnvd
Cvelist	CVE-2020-12376	17 Feb 202113:56	–	cvelist
EUVD	EUVD-2020-4688	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	9 Feb 202100:00	–	intel
NVD	CVE-2020-12376	17 Feb 202114:15	–	nvd
OSV	CVE-2020-12376	17 Feb 202114:15	–	osv
Prion	Hardcoded credentials	17 Feb 202114:15	–	prion
RedhatCVE	CVE-2020-12376	22 May 202517:51	–	redhatcve

NVD

Node

intel bmc_firmwareRange<2.47

AND

intel hns2600bpbMatch-

intel hns2600bpb24Match-

intel hns2600bpb24rMatch-

intel hns2600bpblcMatch-

intel hns2600bpblc24Match-

intel hns2600bpblc24rMatch-

intel hns2600bpbrMatch-

intel hns2600bpqMatch-

intel hns2600bpq24Match-

intel hns2600bpq24rMatch-

intel hns2600bpqrMatch-

intel hns2600bpsMatch-

intel hns2600bps24Match-

intel hns2600bps24rMatch-

intel hns2600bpsrMatch-

intel r1000wfMatch-

intel r1208wfqysrMatch-

intel r1208wftysMatch-

intel r1208wftysrMatch-

intel r1304wf0ysMatch-

intel r1304wf0ysrMatch-

intel r1304wftysMatch-

intel r1304wftysrMatch-

intel r2208wf0zsMatch-

intel r2208wf0zsrMatch-

intel r2208wfqzsMatch-

intel r2208wfqzsrMatch-

intel r2208wftzsMatch-

intel r2208wftzsrMatch-

intel r2224wfqzsMatch-

intel r2224wftzsMatch-

intel r2224wftzsrMatch-

intel r2308wftzsMatch-

intel r2308wftzsrMatch-

intel r2312wf0npMatch-

intel r2312wf0nprMatch-

intel r2312wfqzsMatch-

intel r2312wftzsMatch-

intel r2312wftzsrMatch-

intel s2600bpbrMatch-

intel s2600bpqrMatch-

intel s2600bpsrMatch-

intel s2600stbMatch-

intel s2600stqMatch-

intel s2600wf0Match-

intel s2600wfqMatch-

intel s2600wftMatch-

[
  {
    "product": "Intel(R) Server Boards, Server Systems and Compute Modules",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 2.47"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

17 Jun 2026 02:51Current

5.2Medium risk

Vulners AI Score5.2

CVSS 22.1

CVSS 3.15.5

EPSS0.00236

CWE-798