CVE-2020-24473

Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:baseboard_management_controller_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:compute_module_hns2600bpb24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpq24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bps24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wf0:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wf0r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wfq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wfqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wft:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wftr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wfqysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wftysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wf0ys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wf0ysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wftysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wf0zs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wf0zsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wfqzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2308wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2308wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wf0np:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wf0npr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wftzsr:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-09 20:15

Updated : 2024-02-28 18:28


NVD link : CVE-2020-24473

Mitre link : CVE-2020-24473

CVE.ORG link : CVE-2020-24473


JSON object : View

Products Affected

intel

  • server_system_r2208wf0zs
  • server_system_r2208wftzs
  • server_system_r2208wftzsr
  • server_board_s2600bpb
  • server_system_r1208wftys
  • server_board_s2600wf0
  • server_board_s2600bps
  • server_system_r2208wfqzs
  • server_board_s2600bpqr
  • server_board_s2600wfqr
  • server_board_s2600stqr
  • server_system_r2312wfqzs
  • compute_module_hns2600bpsr
  • server_system_r1304wftys
  • server_system_r2208wfqzsr
  • server_board_s2600wf0r
  • compute_module_hns2600bpbr
  • server_system_r1208wfqysr
  • server_board_s2600bpsr
  • server_board_s2600bpbr
  • compute_module_hns2600bpb24r
  • server_board_s2600stbr
  • server_system_r1304wftysr
  • server_board_s2600wftr
  • server_system_r2308wftzs
  • server_board_s2600wfq
  • server_system_r2312wf0np
  • server_system_r2224wftzsr
  • server_system_r2312wf0npr
  • server_board_s2600stb
  • server_system_r2312wftzsr
  • server_board_s2600wft
  • server_system_r2312wftzs
  • baseboard_management_controller_firmware
  • server_board_s2600stq
  • server_system_r1304wf0ys
  • compute_module_hns2600bpq24r
  • server_system_r1208wftysr
  • server_board_s2600bpq
  • server_system_r2224wftzs
  • server_system_r2308wftzsr
  • server_system_r2208wf0zsr
  • compute_module_hns2600bps24r
  • compute_module_hns2600bpqr
  • server_system_r2224wfqzs
  • server_system_r1304wf0ysr
CWE
CWE-787

Out-of-bounds Write