CVE-2020-24474
Severity Score
8.0
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Un desbordamiento del búfer en el firmware del BMC para algunas Intel® Server Boards, Server Systems and Compute Modules versiones anteriores a la versión 2.48.ce3e3bd2 puede permitir a un usuario autenticado permitir potencialmente una escalada de privilegios por medio de un acceso adyacente
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-08-19 CVE Reserved
- 2021-06-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html | 2021-07-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Compute Module Hns2600bpb24r Search vendor "Intel" for product "Compute Module Hns2600bpb24r" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Compute Module Hns2600bpbr Search vendor "Intel" for product "Compute Module Hns2600bpbr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Compute Module Hns2600bpq24r Search vendor "Intel" for product "Compute Module Hns2600bpq24r" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Compute Module Hns2600bpqr Search vendor "Intel" for product "Compute Module Hns2600bpqr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Compute Module Hns2600bps24r Search vendor "Intel" for product "Compute Module Hns2600bps24r" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Compute Module Hns2600bpsr Search vendor "Intel" for product "Compute Module Hns2600bpsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600bpb Search vendor "Intel" for product "Server Board S2600bpb" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600bpbr Search vendor "Intel" for product "Server Board S2600bpbr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600bpq Search vendor "Intel" for product "Server Board S2600bpq" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600bpqr Search vendor "Intel" for product "Server Board S2600bpqr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600bps Search vendor "Intel" for product "Server Board S2600bps" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600bpsr Search vendor "Intel" for product "Server Board S2600bpsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600stb Search vendor "Intel" for product "Server Board S2600stb" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600stbr Search vendor "Intel" for product "Server Board S2600stbr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600stq Search vendor "Intel" for product "Server Board S2600stq" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600stqr Search vendor "Intel" for product "Server Board S2600stqr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600wf0 Search vendor "Intel" for product "Server Board S2600wf0" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600wf0r Search vendor "Intel" for product "Server Board S2600wf0r" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600wfq Search vendor "Intel" for product "Server Board S2600wfq" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600wfqr Search vendor "Intel" for product "Server Board S2600wfqr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600wft Search vendor "Intel" for product "Server Board S2600wft" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server Board S2600wftr Search vendor "Intel" for product "Server Board S2600wftr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1208wfqysr Search vendor "Intel" for product "Server System R1208wfqysr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1208wftys Search vendor "Intel" for product "Server System R1208wftys" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1208wftysr Search vendor "Intel" for product "Server System R1208wftysr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1304wf0ys Search vendor "Intel" for product "Server System R1304wf0ys" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1304wf0ysr Search vendor "Intel" for product "Server System R1304wf0ysr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1304wftys Search vendor "Intel" for product "Server System R1304wftys" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R1304wftysr Search vendor "Intel" for product "Server System R1304wftysr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2208wf0zs Search vendor "Intel" for product "Server System R2208wf0zs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2208wf0zsr Search vendor "Intel" for product "Server System R2208wf0zsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2208wfqzs Search vendor "Intel" for product "Server System R2208wfqzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2208wfqzsr Search vendor "Intel" for product "Server System R2208wfqzsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2208wftzs Search vendor "Intel" for product "Server System R2208wftzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2208wftzsr Search vendor "Intel" for product "Server System R2208wftzsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2224wfqzs Search vendor "Intel" for product "Server System R2224wfqzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2224wftzs Search vendor "Intel" for product "Server System R2224wftzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2224wftzsr Search vendor "Intel" for product "Server System R2224wftzsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2308wftzs Search vendor "Intel" for product "Server System R2308wftzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2308wftzsr Search vendor "Intel" for product "Server System R2308wftzsr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2312wf0np Search vendor "Intel" for product "Server System R2312wf0np" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2312wf0npr Search vendor "Intel" for product "Server System R2312wf0npr" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2312wfqzs Search vendor "Intel" for product "Server System R2312wfqzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2312wftzs Search vendor "Intel" for product "Server System R2312wftzs" | - | - |
Safe
|
| Intel Search vendor "Intel" | Baseboard Management Controller Firmware Search vendor "Intel" for product "Baseboard Management Controller Firmware" | < 2.48.ce3e3bd2 Search vendor "Intel" for product "Baseboard Management Controller Firmware" and version " < 2.48.ce3e3bd2" | - |
Affected
| in | Intel Search vendor "Intel" | Server System R2312wftzsr Search vendor "Intel" for product "Server System R2312wftzsr" | - | - |
Safe
|