CVE-2020-24473
First published: Wed Jun 09 2021(Updated: )
Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| <2.48.ce3e3bd2 | ||
| Intel Compute Module Hns2600bpb24r | ||
| Intel Compute Module Hns2600bpbr | ||
| Intel Compute Module Hns2600bpq24r | ||
| Intel Compute Module Hns2600bpqr | ||
| Intel Compute Module Hns2600bps24r | ||
| Intel Compute Module Hns2600bpsr | ||
| Intel Server Board S2600bpb | ||
| Intel Server Board S2600bpbr | ||
| Intel Server Board S2600bpq | ||
| Intel Server Board S2600bpqr | ||
| Intel Server Board S2600bps | ||
| Intel Server Board S2600bpsr | ||
| Intel Server Board S2600stb | ||
| Intel Server Board S2600stbr | ||
| Intel Server Board S2600stq | ||
| Intel Server Board S2600stqr | ||
| Intel Server Board S2600wf0 | ||
| Intel Server Board S2600wf0r | ||
| Intel Server Board S2600wfq | ||
| Intel Server Board S2600wfqr | ||
| Intel Server Board S2600wft | ||
| Intel Server Board S2600wftr | ||
| Intel Server System R1208wfqysr | ||
| Intel Server System R1208wftys | ||
| Intel Server System R1208wftysr | ||
| Intel Server System R1304wf0ys | ||
| Intel Server System R1304wf0ysr | ||
| Intel Server System R1304wftys | ||
| Intel Server System R1304wftysr | ||
| Intel Server System R2208wf0zs | ||
| Intel Server System R2208wf0zsr | ||
| Intel Server System R2208wfqzs | ||
| Intel Server System R2208wfqzsr | ||
| Intel Server System R2208wftzs | ||
| Intel Server System R2208wftzsr | ||
| Intel Server System R2224wfqzs | ||
| Intel Server System R2224wftzs | ||
| Intel Server System R2224wftzsr | ||
| Intel Server System R2308wftzs | ||
| Intel Server System R2308wftzsr | ||
| Intel Server System R2312wf0np | ||
| Intel Server System R2312wf0npr | ||
| Intel Server System R2312wfqzs | ||
| Intel Server System R2312wftzs | ||
| Intel Server System R2312wftzsr |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-24473?
CVE-2020-24473 is a vulnerability in the BMC firmware for some Intel(R) Server Boards, Server Systems, and Compute Modules before version 2.48.ce3e3bd2.
How severe is CVE-2020-24473?
CVE-2020-24473 has a severity score of 7.8, which is considered high.
How can an authenticated user potentially exploit CVE-2020-24473?
An authenticated user may potentially exploit CVE-2020-24473 to enable escalation of privilege via local access.
What is the affected software for CVE-2020-24473?
The affected software includes Intel(R) Server Boards, Server Systems, and Compute Modules before version 2.48.ce3e3bd2.
Where can I find more information about CVE-2020-24473?
More information about CVE-2020-24473 can be found at the Intel Security Advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel compute module hns2600bpb24r
- canonical/intel compute module hns2600bpbr
- canonical/intel compute module hns2600bpq24r
- canonical/intel compute module hns2600bpqr
- canonical/intel compute module hns2600bps24r
- canonical/intel compute module hns2600bpsr
- canonical/intel server board s2600bpb
- canonical/intel server board s2600bpbr
- canonical/intel server board s2600bpq
- canonical/intel server board s2600bpqr
- canonical/intel server board s2600bps
- canonical/intel server board s2600bpsr
- canonical/intel server board s2600stb
- canonical/intel server board s2600stbr
- canonical/intel server board s2600stq
- canonical/intel server board s2600stqr
- canonical/intel server board s2600wf0
- canonical/intel server board s2600wf0r
- canonical/intel server board s2600wfq
- canonical/intel server board s2600wfqr
- canonical/intel server board s2600wft
- canonical/intel server board s2600wftr
- canonical/intel server system r1208wfqysr
- canonical/intel server system r1208wftys
- canonical/intel server system r1208wftysr
- canonical/intel server system r1304wf0ys
- canonical/intel server system r1304wf0ysr
- canonical/intel server system r1304wftys
- canonical/intel server system r1304wftysr
- canonical/intel server system r2208wf0zs
- canonical/intel server system r2208wf0zsr
- canonical/intel server system r2208wfqzs
- canonical/intel server system r2208wfqzsr
- canonical/intel server system r2208wftzs
- canonical/intel server system r2208wftzsr
- canonical/intel server system r2224wfqzs
- canonical/intel server system r2224wftzs
- canonical/intel server system r2224wftzsr
- canonical/intel server system r2308wftzs
- canonical/intel server system r2308wftzsr
- canonical/intel server system r2312wf0np
- canonical/intel server system r2312wf0npr
- canonical/intel server system r2312wfqzs
- canonical/intel server system r2312wftzs
- canonical/intel server system r2312wftzsr