CVE-2020-24474: Buffer Overflow
First published: Wed Jun 09 2021(Updated: )
Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Baseboard Management Controller Firmware | <2.48.ce3e3bd2 | |
| Intel Compute Module HNS2600BPB24R Firmware | ||
| Intel Compute Module HNS2600 | ||
| Intel compute module hns2600bpq24r firmware | ||
| Intel Compute Module HNS2600 | ||
| Intel Compute Module HNS2600BPS24R Firmware | ||
| Intel Compute Module hns2600bpsr | ||
| Intel Server Board S2600BPB Firmware | ||
| Intel S2600BPBR Firmware | ||
| Intel Server Board S2600BPQ | ||
| Intel S2600BPQR Firmware | ||
| Intel Server Board S2600BPS Firmware | ||
| Intel Server Board S2600BPSR Firmware | ||
| Intel BBS2600STB | ||
| Intel S2600STBR Firmware | ||
| Intel S2600STQ | ||
| Intel BBS2600STQR | ||
| Intel S2600WF Series | ||
| Intel S2600WF0 | ||
| Intel S2600WFQ | ||
| Intel S2600WFQR Firmware | ||
| Intel S2600WFT | ||
| Intel S2600WFTR | ||
| Intel HPCR1208WFQYSR | ||
| Intel HPCR1208WFTYSR | ||
| Intel HPCR1208WFTYSR | ||
| Intel Server System R1304WF0YS | ||
| Intel Server System R1304WF0YSR | ||
| Intel Server System R1304WFTYSR | ||
| Intel Server System R1304WFTYS | ||
| Intel Server System R2208 | ||
| Intel hpcr2208wf0zsr | ||
| Intel R2208WFQZ | ||
| Intel R2208WFQZ | ||
| Intel Server System R2208WF TZS | ||
| Intel Server System R2208WFTZSR | ||
| Intel Server System R2224WFQZS | ||
| Intel R2224WFTZS | ||
| Intel hpcr2224wftzsr | ||
| Intel Server System R2308WFTZSR | ||
| Intel R2308WFTZSR | ||
| Intel Server System R2312WF0NP | ||
| Intel Server System R2312WF0NPR | ||
| Intel R2312WFQZS | ||
| Intel hpcr2312wftzsr | ||
| Intel Server System R2312WFTZSR |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-24474?
CVE-2020-24474 is a buffer overflow vulnerability in the BMC firmware for some Intel Server Boards, Server Systems, and Compute Modules.
How severe is CVE-2020-24474?
CVE-2020-24474 has a high severity rating with a score of 8 out of 10.
How can an authenticated user exploit CVE-2020-24474?
An authenticated user may be able to enable escalation of privilege through adjacent access.
Which software versions are affected by CVE-2020-24474?
Versions of the BMC firmware before 2.48.ce3e3bd2 are affected.
Where can I find more information about CVE-2020-24474?
You can find more information about CVE-2020-24474 at the following link: [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel baseboard management controller firmware
- canonical/intel compute module hns2600bpb24r firmware
- canonical/intel compute module hns2600
- canonical/intel compute module hns2600bpq24r firmware
- canonical/intel compute module hns2600bps24r firmware
- canonical/intel compute module hns2600bpsr
- canonical/intel server board s2600bpb firmware
- canonical/intel s2600bpbr firmware
- canonical/intel server board s2600bpq
- canonical/intel s2600bpqr firmware
- canonical/intel server board s2600bps firmware
- canonical/intel server board s2600bpsr firmware
- canonical/intel bbs2600stb
- canonical/intel s2600stbr firmware
- canonical/intel s2600stq
- canonical/intel bbs2600stqr
- canonical/intel s2600wf series
- canonical/intel s2600wf0
- canonical/intel s2600wfq
- canonical/intel s2600wfqr firmware
- canonical/intel s2600wft
- canonical/intel s2600wftr
- canonical/intel hpcr1208wfqysr
- canonical/intel hpcr1208wftysr
- canonical/intel server system r1304wf0ys
- canonical/intel server system r1304wf0ysr
- canonical/intel server system r1304wftysr
- canonical/intel server system r1304wftys
- canonical/intel server system r2208
- canonical/intel hpcr2208wf0zsr
- canonical/intel r2208wfqz
- canonical/intel server system r2208wf tzs
- canonical/intel server system r2208wftzsr
- canonical/intel server system r2224wfqzs
- canonical/intel r2224wftzs
- canonical/intel hpcr2224wftzsr
- canonical/intel server system r2308wftzsr
- canonical/intel r2308wftzsr
- canonical/intel server system r2312wf0np
- canonical/intel server system r2312wf0npr
- canonical/intel r2312wfqzs
- canonical/intel hpcr2312wftzsr
- canonical/intel server system r2312wftzsr