CVE-2020-12380

🗓️ 17 Feb 2021 13:55:53Reported by intelType

Out of bounds read in Intel(R) BMC firmware, allowing privilege escalation via local access

Reporter	Title	Published	Views	Family All 9
CNNVD	多款 Intel BMC 固件缓冲区错误漏洞	10 Feb 202100:00	–	cnnvd
CNVD	Multiple Intel® Server Out-of-Bounds Read Vulnerabilities	18 Feb 202100:00	–	cnvd
Cvelist	CVE-2020-12380	17 Feb 202113:55	–	cvelist
EUVD	EUVD-2020-4692	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	9 Feb 202100:00	–	intel
NVD	CVE-2020-12380	17 Feb 202114:15	–	nvd
OSV	CVE-2020-12380	17 Feb 202114:15	–	osv
Prion	Cross site scripting	17 Feb 202114:15	–	prion
RedhatCVE	CVE-2020-12380	9 Jan 202609:55	–	redhatcve

NVD

Node

intel bmc_firmwareRange<2.47

AND

intel hns2600bpbMatch-

intel hns2600bpb24Match-

intel hns2600bpb24rMatch-

intel hns2600bpblcMatch-

intel hns2600bpblc24Match-

intel hns2600bpblc24rMatch-

intel hns2600bpbrMatch-

intel hns2600bpqMatch-

intel hns2600bpq24Match-

intel hns2600bpq24rMatch-

intel hns2600bpqrMatch-

intel hns2600bpsMatch-

intel hns2600bps24Match-

intel hns2600bps24rMatch-

intel hns2600bpsrMatch-

intel r1000wfMatch-

intel r1208wfqysrMatch-

intel r1208wftysMatch-

intel r1208wftysrMatch-

intel r1304wf0ysMatch-

intel r1304wf0ysrMatch-

intel r1304wftysMatch-

intel r1304wftysrMatch-

intel r2208wf0zsMatch-

intel r2208wf0zsrMatch-

intel r2208wfqzsMatch-

intel r2208wfqzsrMatch-

intel r2208wftzsMatch-

intel r2208wftzsrMatch-

intel r2224wfqzsMatch-

intel r2224wftzsMatch-

intel r2224wftzsrMatch-

intel r2308wftzsMatch-

intel r2308wftzsrMatch-

intel r2312wf0npMatch-

intel r2312wf0nprMatch-

intel r2312wfqzsMatch-

intel r2312wftzsMatch-

intel r2312wftzsrMatch-

intel s2600bpbrMatch-

intel s2600bpqrMatch-

intel s2600bpsrMatch-

intel s2600stbMatch-

intel s2600stqMatch-

intel s2600wf0Match-

intel s2600wfqMatch-

intel s2600wftMatch-

[
  {
    "product": "Intel(R) Server Boards, Server Systems and Compute Modules",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 2.47"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

21 Nov 2024 04:59Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

EPSS0.00058

CWE-125