CVE-2020-24474

Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:baseboard_management_controller_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:compute_module_hns2600bpb24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpq24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bps24r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:compute_module_hns2600bpsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bps:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600bpsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stbr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600stqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wf0:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wf0r:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wfq:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wfqr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wft:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_board_s2600wftr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wfqysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1208wftysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wf0ys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wf0ysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wftys:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r1304wftysr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wf0zs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wf0zsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wfqzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2208wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2224wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2308wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2308wftzsr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wf0np:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wf0npr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wfqzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wftzs:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:server_system_r2312wftzsr:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-09 20:15

Updated : 2024-02-28 18:28


NVD link : CVE-2020-24474

Mitre link : CVE-2020-24474

CVE.ORG link : CVE-2020-24474


JSON object : View

Products Affected

intel

  • server_system_r2208wf0zs
  • server_system_r2208wftzs
  • server_system_r2208wftzsr
  • server_board_s2600bpb
  • server_system_r1208wftys
  • server_board_s2600wf0
  • server_board_s2600bps
  • server_system_r2208wfqzs
  • server_board_s2600bpqr
  • server_board_s2600wfqr
  • server_board_s2600stqr
  • server_system_r2312wfqzs
  • compute_module_hns2600bpsr
  • server_system_r1304wftys
  • server_system_r2208wfqzsr
  • server_board_s2600wf0r
  • compute_module_hns2600bpbr
  • server_system_r1208wfqysr
  • server_board_s2600bpsr
  • server_board_s2600bpbr
  • compute_module_hns2600bpb24r
  • server_board_s2600stbr
  • server_system_r1304wftysr
  • server_board_s2600wftr
  • server_system_r2308wftzs
  • server_board_s2600wfq
  • server_system_r2312wf0np
  • server_system_r2224wftzsr
  • server_system_r2312wf0npr
  • server_board_s2600stb
  • server_system_r2312wftzsr
  • server_board_s2600wft
  • server_system_r2312wftzs
  • baseboard_management_controller_firmware
  • server_board_s2600stq
  • server_system_r1304wf0ys
  • compute_module_hns2600bpq24r
  • server_system_r1208wftysr
  • server_board_s2600bpq
  • server_system_r2224wftzs
  • server_system_r2308wftzsr
  • server_system_r2208wf0zsr
  • compute_module_hns2600bps24r
  • compute_module_hns2600bpqr
  • server_system_r2224wfqzs
  • server_system_r1304wf0ysr
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')