CVE-2020-24473

Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:h:intel:compute_module_hns2600bpb24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpq24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bps24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wf0:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wf0r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wfq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wfqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wft:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wftr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wfqysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wftysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wf0ys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wf0ysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wftysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wf0zs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wf0zsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wfqzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2308wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2308wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wf0np:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wf0npr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:baseboard_management_controller_firmware:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-09 20:15

Updated : 2021-07-01 19:55


NVD link : CVE-2020-24473

Mitre link : CVE-2020-24473

CVE.ORG link : CVE-2020-24473


JSON object : View

Products Affected

intel

  • server_board_s2600bpsr
  • server_system_r2312wf0np
  • server_system_r2308wftzsr
  • server_system_r1304wf0ysr
  • server_system_r2312wf0npr
  • server_system_r1208wftys
  • server_system_r2224wftzs
  • server_board_s2600wfq
  • server_system_r2308wftzs
  • server_board_s2600bpq
  • compute_module_hns2600bpsr
  • compute_module_hns2600bpb24r
  • server_system_r2208wftzsr
  • server_board_s2600wf0r
  • server_system_r2312wfqzs
  • server_board_s2600bpb
  • baseboard_management_controller_firmware
  • server_board_s2600bpqr
  • server_system_r2224wftzsr
  • server_board_s2600wf0
  • server_system_r2312wftzsr
  • server_board_s2600bps
  • server_system_r1208wftysr
  • server_system_r2208wf0zsr
  • server_system_r2208wftzs
  • server_system_r2208wf0zs
  • compute_module_hns2600bpq24r
  • server_board_s2600stbr
  • server_board_s2600wfqr
  • server_system_r2224wfqzs
  • compute_module_hns2600bpqr
  • compute_module_hns2600bps24r
  • server_system_r2208wfqzsr
  • server_system_r2312wftzs
  • server_system_r1208wfqysr
  • server_board_s2600stb
  • server_system_r1304wf0ys
  • server_board_s2600bpbr
  • server_board_s2600wft
  • compute_module_hns2600bpbr
  • server_system_r2208wfqzs
  • server_system_r1304wftysr
  • server_board_s2600wftr
  • server_system_r1304wftys
  • server_board_s2600stqr
  • server_board_s2600stq
CWE
CWE-787

Out-of-bounds Write