CVE-2020-24475

🗓️ 09 Jun 2021 19:01:50Reported by intelType

Improper initialization in the BMC firmware for Intel Server Boards before version 2.48.ce3e3bd

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2020-24475	9 Jun 202120:15	–	attackerkb
CNNVD	Intel Server Board 安全漏洞	9 Jun 202100:00	–	cnnvd
Cvelist	CVE-2020-24475	9 Jun 202119:01	–	cvelist
EUVD	EUVD-2020-17195	7 Oct 202500:30	–	euvd
Intel	Intel® Server Boards, Server Systems and Compute Modules Advisory	8 Jun 202100:00	–	intel
NCSC	Fixed vulnerabilities in various Intel processors, chipsets, firmware, drivers and tools	9 Jun 202100:00	–	ncsc
NVD	CVE-2020-24475	9 Jun 202120:15	–	nvd
OSV	CVE-2020-24475	9 Jun 202120:15	–	osv
Prion	Input validation	9 Jun 202120:15	–	prion
RedhatCVE	CVE-2020-24475	9 Jan 202609:49	–	redhatcve

NVD

Node

intel baseboard_management_controller_firmwareRange<2.48.ce3e3bd2

AND

intel compute_module_hns2600bpb24rMatch-

intel compute_module_hns2600bpbrMatch-

intel compute_module_hns2600bpq24rMatch-

intel compute_module_hns2600bpqrMatch-

intel compute_module_hns2600bps24rMatch-

intel compute_module_hns2600bpsrMatch-

intel server_board_s2600bpbMatch-

intel server_board_s2600bpbrMatch-

intel server_board_s2600bpqMatch-

intel server_board_s2600bpqrMatch-

intel server_board_s2600bpsMatch-

intel server_board_s2600bpsrMatch-

intel server_board_s2600stbMatch-

intel server_board_s2600stbrMatch-

intel server_board_s2600stqMatch-

intel server_board_s2600stqrMatch-

intel server_board_s2600wf0Match-

intel server_board_s2600wf0rMatch-

intel server_board_s2600wfqMatch-

intel server_board_s2600wfqrMatch-

intel server_board_s2600wftMatch-

intel server_board_s2600wftrMatch-

intel server_system_r1208wfqysrMatch-

intel server_system_r1208wftysMatch-

intel server_system_r1208wftysrMatch-

intel server_system_r1304wf0ysMatch-

intel server_system_r1304wf0ysrMatch-

intel server_system_r1304wftysMatch-

intel server_system_r1304wftysrMatch-

intel server_system_r2208wf0zsMatch-

intel server_system_r2208wf0zsrMatch-

intel server_system_r2208wfqzsMatch-

intel server_system_r2208wfqzsrMatch-

intel server_system_r2208wftzsMatch-

intel server_system_r2208wftzsrMatch-

intel server_system_r2224wfqzsMatch-

intel server_system_r2224wftzsMatch-

intel server_system_r2224wftzsrMatch-

intel server_system_r2308wftzsMatch-

intel server_system_r2308wftzsrMatch-

intel server_system_r2312wf0npMatch-

intel server_system_r2312wf0nprMatch-

intel server_system_r2312wfqzsMatch-

intel server_system_r2312wftzsMatch-

intel server_system_r2312wftzsrMatch-

[
  {
    "product": "Intel(R) Server Boards, Server Systems and Compute Modules",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 2.48.ce3e3bd2"
      }
    ]
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html

21 Nov 2024 05:14Current

5.3Medium risk

Vulners AI Score5.3

CVSS 22.1

CVSS 3.15.5

EPSS0.0005

CWE-665