// For flags

CVE-2020-24473

 

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Una escritura fuera de límites en el firmware del BMC para algunas Intel® Server Boards, Server Systems y Compute Modules versiones anteriores a 2.48.ce3e3bd2, puede permitir a un usuario autenticado permitir potencialmente una escalada de privilegios por medio de un acceso local

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-08-19 CVE Reserved
  • 2021-06-09 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-787: Out-of-bounds Write
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Compute Module Hns2600bpb24r
Search vendor "Intel" for product "Compute Module Hns2600bpb24r"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Compute Module Hns2600bpbr
Search vendor "Intel" for product "Compute Module Hns2600bpbr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Compute Module Hns2600bpq24r
Search vendor "Intel" for product "Compute Module Hns2600bpq24r"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Compute Module Hns2600bpqr
Search vendor "Intel" for product "Compute Module Hns2600bpqr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Compute Module Hns2600bps24r
Search vendor "Intel" for product "Compute Module Hns2600bps24r"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Compute Module Hns2600bpsr
Search vendor "Intel" for product "Compute Module Hns2600bpsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600bpb
Search vendor "Intel" for product "Server Board S2600bpb"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600bpbr
Search vendor "Intel" for product "Server Board S2600bpbr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600bpq
Search vendor "Intel" for product "Server Board S2600bpq"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600bpqr
Search vendor "Intel" for product "Server Board S2600bpqr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600bps
Search vendor "Intel" for product "Server Board S2600bps"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600bpsr
Search vendor "Intel" for product "Server Board S2600bpsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600stb
Search vendor "Intel" for product "Server Board S2600stb"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600stbr
Search vendor "Intel" for product "Server Board S2600stbr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600stq
Search vendor "Intel" for product "Server Board S2600stq"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600stqr
Search vendor "Intel" for product "Server Board S2600stqr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600wf0
Search vendor "Intel" for product "Server Board S2600wf0"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600wf0r
Search vendor "Intel" for product "Server Board S2600wf0r"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600wfq
Search vendor "Intel" for product "Server Board S2600wfq"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600wfqr
Search vendor "Intel" for product "Server Board S2600wfqr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600wft
Search vendor "Intel" for product "Server Board S2600wft"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server Board S2600wftr
Search vendor "Intel" for product "Server Board S2600wftr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1208wfqysr
Search vendor "Intel" for product "Server System R1208wfqysr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1208wftys
Search vendor "Intel" for product "Server System R1208wftys"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1208wftysr
Search vendor "Intel" for product "Server System R1208wftysr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1304wf0ys
Search vendor "Intel" for product "Server System R1304wf0ys"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1304wf0ysr
Search vendor "Intel" for product "Server System R1304wf0ysr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1304wftys
Search vendor "Intel" for product "Server System R1304wftys"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R1304wftysr
Search vendor "Intel" for product "Server System R1304wftysr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2208wf0zs
Search vendor "Intel" for product "Server System R2208wf0zs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2208wf0zsr
Search vendor "Intel" for product "Server System R2208wf0zsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2208wfqzs
Search vendor "Intel" for product "Server System R2208wfqzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2208wfqzsr
Search vendor "Intel" for product "Server System R2208wfqzsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2208wftzs
Search vendor "Intel" for product "Server System R2208wftzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2208wftzsr
Search vendor "Intel" for product "Server System R2208wftzsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2224wfqzs
Search vendor "Intel" for product "Server System R2224wfqzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2224wftzs
Search vendor "Intel" for product "Server System R2224wftzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2224wftzsr
Search vendor "Intel" for product "Server System R2224wftzsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2308wftzs
Search vendor "Intel" for product "Server System R2308wftzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2308wftzsr
Search vendor "Intel" for product "Server System R2308wftzsr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2312wf0np
Search vendor "Intel" for product "Server System R2312wf0np"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2312wf0npr
Search vendor "Intel" for product "Server System R2312wf0npr"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2312wfqzs
Search vendor "Intel" for product "Server System R2312wfqzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2312wftzs
Search vendor "Intel" for product "Server System R2312wftzs"
--
Safe
Intel
Search vendor "Intel"
Baseboard Management Controller Firmware
Search vendor "Intel" for product "Baseboard Management Controller Firmware"
< 2.48.ce3e3bd2
Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2"
-
Affected
in Intel
Search vendor "Intel"
Server System R2312wftzsr
Search vendor "Intel" for product "Server System R2312wftzsr"
--
Safe