CVE-2020-24473
First published: Wed Jun 09 2021(Updated: )
Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Baseboard Management Controller Firmware | <2.48.ce3e3bd2 | |
| Intel Compute Module HNS2600BPB24R Firmware | ||
| Intel Compute Module hns2600bpbr | ||
| Intel compute module hns2600bpq24r firmware | ||
| Intel Compute Module hns2600bpqr | ||
| Intel Compute Module HNS2600BPS24R Firmware | ||
| Intel Compute Module hns2600bpsr | ||
| Intel Server Board S2600BPB Firmware | ||
| Intel Server Board S2600BPBR Firmware | ||
| Intel Server Board S2600BPQ | ||
| Intel S2600BPQR Firmware | ||
| Intel Server Board S2600BPS Firmware | ||
| Intel Server Board S2600BPSR Firmware | ||
| Intel BBS2600STB | ||
| Intel S2600STBR Firmware | ||
| Intel S2600STQ | ||
| Intel BBS2600STQR | ||
| Intel S2600WF0 | ||
| Intel Server Board S2600WF0R | ||
| Intel S2600WFQ | ||
| Intel S2600WFQR Firmware | ||
| Intel S2600WFT | ||
| Intel S2600WFTR | ||
| Intel HPCR1208WFQYSR | ||
| Intel HPCR1208WFTYSR | ||
| Intel HPCR1208WFTYSR | ||
| Intel Server System R1304WF0YS | ||
| Intel Server System R1304WF0YSR | ||
| Intel Server System R1304WFTYS | ||
| Intel Server System R1304WFTYS | ||
| Intel Server System R2208WF0ZS | ||
| Intel hpcr2208wf0zsr | ||
| Intel Server System R2208WFQZS | ||
| Intel Server System R2208WFQZSR | ||
| Intel Server System R2208WF TZS | ||
| Intel Server System R2208WF TZS | ||
| Intel Server System R2224WFQZS | ||
| Intel R2224WFTZS | ||
| Intel hpcr2224wftzsr | ||
| Intel Server System R2308WFTZSR | ||
| Intel R2308WFTZSR | ||
| Intel Server System R2312WF0NP | ||
| Intel Server System R2312WF0NPR | ||
| Intel Server System R2312WFQZS | ||
| Intel hpcr2312wftzsr | ||
| Intel Server System R2312WFTZSR |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-24473?
CVE-2020-24473 is a vulnerability in the BMC firmware for some Intel(R) Server Boards, Server Systems, and Compute Modules before version 2.48.ce3e3bd2.
How severe is CVE-2020-24473?
CVE-2020-24473 has a severity score of 7.8, which is considered high.
How can an authenticated user potentially exploit CVE-2020-24473?
An authenticated user may potentially exploit CVE-2020-24473 to enable escalation of privilege via local access.
What is the affected software for CVE-2020-24473?
The affected software includes Intel(R) Server Boards, Server Systems, and Compute Modules before version 2.48.ce3e3bd2.
Where can I find more information about CVE-2020-24473?
More information about CVE-2020-24473 can be found at the Intel Security Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel baseboard management controller firmware
- canonical/intel compute module hns2600bpb24r firmware
- canonical/intel compute module hns2600bpbr
- canonical/intel compute module hns2600bpq24r firmware
- canonical/intel compute module hns2600bpqr
- canonical/intel compute module hns2600bps24r firmware
- canonical/intel compute module hns2600bpsr
- canonical/intel server board s2600bpb firmware
- canonical/intel server board s2600bpbr firmware
- canonical/intel server board s2600bpq
- canonical/intel s2600bpqr firmware
- canonical/intel server board s2600bps firmware
- canonical/intel server board s2600bpsr firmware
- canonical/intel bbs2600stb
- canonical/intel s2600stbr firmware
- canonical/intel s2600stq
- canonical/intel bbs2600stqr
- canonical/intel s2600wf0
- canonical/intel server board s2600wf0r
- canonical/intel s2600wfq
- canonical/intel s2600wfqr firmware
- canonical/intel s2600wft
- canonical/intel s2600wftr
- canonical/intel hpcr1208wfqysr
- canonical/intel hpcr1208wftysr
- canonical/intel server system r1304wf0ys
- canonical/intel server system r1304wf0ysr
- canonical/intel server system r1304wftys
- canonical/intel server system r2208wf0zs
- canonical/intel hpcr2208wf0zsr
- canonical/intel server system r2208wfqzs
- canonical/intel server system r2208wfqzsr
- canonical/intel server system r2208wf tzs
- canonical/intel server system r2224wfqzs
- canonical/intel r2224wftzs
- canonical/intel hpcr2224wftzsr
- canonical/intel server system r2308wftzsr
- canonical/intel r2308wftzsr
- canonical/intel server system r2312wf0np
- canonical/intel server system r2312wf0npr
- canonical/intel server system r2312wfqzs
- canonical/intel hpcr2312wftzsr
- canonical/intel server system r2312wftzsr