CVE-2020-12375

Published: Feb 17, 2021Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (1)

Products: Intel: Bmc Firmware

Intel

1 product

Bmc Firmware

Configuration A

1 vulnerable · 47 platform

Vulnerable Software	Affected Versions
Intel Bmc Firmware	Before 2.47

Running on/with	Platform Versions
Intel Hns2600bpb	All versions
Intel Hns2600bpb24	All versions
Intel Hns2600bpb24r	All versions
Intel Hns2600bpblc	All versions
Intel Hns2600bpblc24	All versions
Intel Hns2600bpblc24r	All versions
Intel Hns2600bpbr	All versions
Intel Hns2600bpq	All versions
Intel Hns2600bpq24	All versions
Intel Hns2600bpq24r	All versions
Intel Hns2600bpqr	All versions
Intel Hns2600bps	All versions
Intel Hns2600bps24	All versions
Intel Hns2600bps24r	All versions
Intel Hns2600bpsr	All versions
Intel R1000wf	All versions
Intel R1208wfqysr	All versions
Intel R1208wftys	All versions
Intel R1208wftysr	All versions
Intel R1304wf0ys	All versions
Intel R1304wf0ysr	All versions
Intel R1304wftys	All versions
Intel R1304wftysr	All versions
Intel R2208wf0zs	All versions
Intel R2208wf0zsr	All versions
Intel R2208wfqzs	All versions
Intel R2208wfqzsr	All versions
Intel R2208wftzs	All versions
Intel R2208wftzsr	All versions
Intel R2224wfqzs	All versions
Intel R2224wftzs	All versions
Intel R2224wftzsr	All versions
Intel R2308wftzs	All versions
Intel R2308wftzsr	All versions
Intel R2312wf0np	All versions
Intel R2312wf0npr	All versions
Intel R2312wfqzs	All versions
Intel R2312wftzs	All versions
Intel R2312wftzsr	All versions
Intel S2600bpbr	All versions
Intel S2600bpqr	All versions
Intel S2600bpsr	All versions
Intel S2600stb	All versions
Intel S2600stq	All versions
Intel S2600wf0	All versions
Intel S2600wfq	All versions
Intel S2600wft	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.