CVE-2020-12374: Buffer Overflow
First published: Fri Feb 19 2021(Updated: )
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel BMC Firmware | <2.47 | |
| Intel HNS2600BPBR | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPB24R | ||
| Intel HNS2600BPBLC | ||
| Intel HNS2600BPBLC24 | ||
| Intel HNS2600BPBLC24R | ||
| Intel HNS2600BPBR | ||
| Intel HNS2600WPQ | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPQ24R | ||
| Intel HNS2600BPQR | ||
| Intel HNS2600BPS Firmware | ||
| Intel HNS2600BPS24 | ||
| Intel hns2600bps24r | ||
| Intel hpchns2600bpsr | ||
| Intel Server System R1000WF | ||
| Intel Server System r1208wfqysr | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1208WFTYS | ||
| Intel Server System R1304WF0YS | ||
| Intel Server System R1304WF0YSR | ||
| Intel r1304wftys | ||
| Intel Server System R1304WFTYSR | ||
| Intel Server System R2208WF0ZS | ||
| Intel Server System R2208WF0ZSR | ||
| Intel R2208WFQZ | ||
| Intel R2208WFQZSR | ||
| Intel R2208WFTZS | ||
| Intel R2208WFTZSR | ||
| Intel Server System R2224WFQZS | ||
| Intel r2224wftzs | ||
| Intel r2224wftzs | ||
| Intel R2308WFTZSR | ||
| Intel R2308WFTZS | ||
| Intel Server System R2312WF0NP | ||
| Intel Server System R2312WF0NPR | ||
| Intel R2312WFQZS | ||
| Intel R2312WFQZS | ||
| Intel Server System r2312wftzsr | ||
| Intel Server Board S2600BPBR | ||
| Intel BBS2600BPQR | ||
| Intel S2600BP SR | ||
| Intel S2600STB | ||
| Intel s2600stq | ||
| Intel S2600WF0 | ||
| Intel S2600WFQ | ||
| Intel S2600WFT |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-12374?
CVE-2020-12374 is a buffer overflow vulnerability in the BMC firmware for some Intel Server Boards, Server Systems, and Compute Modules.
What is the severity of CVE-2020-12374?
The severity of CVE-2020-12374 is medium with a CVSS score of 6.7.
How can a privileged user potentially exploit CVE-2020-12374?
A privileged user can potentially enable escalation of privilege via local access.
Which software versions are affected by CVE-2020-12374?
BMC firmware versions before 2.47 on some Intel Server Boards, Server Systems, and Compute Modules are affected by CVE-2020-12374.
Where can I find more information about CVE-2020-12374?
You can find more information about CVE-2020-12374 on the Intel Security Center advisory page: [Link](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel bmc firmware
- canonical/intel hns2600bpbr
- canonical/intel hns2600bpb24r
- canonical/intel hns2600bpblc
- canonical/intel hns2600bpblc24
- canonical/intel hns2600bpblc24r
- canonical/intel hns2600wpq
- canonical/intel hns2600bpq24r
- canonical/intel hns2600bpqr
- canonical/intel hns2600bps firmware
- canonical/intel hns2600bps24
- canonical/intel hns2600bps24r
- canonical/intel hpchns2600bpsr
- canonical/intel server system r1000wf
- canonical/intel server system r1208wfqysr
- canonical/intel server system r1208wftys
- canonical/intel server system r1304wf0ys
- canonical/intel server system r1304wf0ysr
- canonical/intel r1304wftys
- canonical/intel server system r1304wftysr
- canonical/intel server system r2208wf0zs
- canonical/intel server system r2208wf0zsr
- canonical/intel r2208wfqz
- canonical/intel r2208wfqzsr
- canonical/intel r2208wftzs
- canonical/intel r2208wftzsr
- canonical/intel server system r2224wfqzs
- canonical/intel r2224wftzs
- canonical/intel r2308wftzsr
- canonical/intel r2308wftzs
- canonical/intel server system r2312wf0np
- canonical/intel server system r2312wf0npr
- canonical/intel r2312wfqzs
- canonical/intel server system r2312wftzsr
- canonical/intel server board s2600bpbr
- canonical/intel bbs2600bpqr
- canonical/intel s2600bp sr
- canonical/intel s2600stb
- canonical/intel s2600stq
- canonical/intel s2600wf0
- canonical/intel s2600wfq
- canonical/intel s2600wft