CVE-2020-12374

Опубликовано: 19 фев. 2021

Источник: nvd

CVSS3: 6.7

CVSS2: 4.6

EPSS Низкий

Описание

Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access.

Ссылки

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html
Patch
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*

Версия до 2.47 (исключая)

Одно из

cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpb24r:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpblc24r:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpbr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpq24r:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpqr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bps24r:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:hns2600bpsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1000wf:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1208wfqysr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1208wftysr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1304wf0ysr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r1304wftysr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2208wf0zsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2208wfqzsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2208wftzsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2224wftzsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2308wftzsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2312wf0npr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:r2312wftzsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600bpbr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600bpqr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600bpsr:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600wf0:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.0008

Низкий

6.7 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-xwxx-8397-833r

github

около 3 лет назад