CVE-2020-12377

2021-02-1713:55:37

intel

www.cve.org

intel

bmc

firmware

input validation

privilege escalation

local access

EPSS

Percentile

12.6%

JSON

Insufficient input validation in the BMC firmware for some Intel® Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "product": "Intel(R) Server Boards, Server Systems and Compute Modules",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 2.47"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-12377