What is CVE-2020-12375?

CVE-2020-12375 is a medium-severity vulnerability in Intel Bmc_firmware, classified under Out-of-bounds Write. CVSS score: 6.7/10. Published 2021-02-17.

How severe is CVE-2020-12375?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Buffer overflow in Intel Bmc_firmware

CVE-2020-12375

Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (18.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Bmc_firmware
Intel Hns2600bpb
Intel Hns2600bpb24
Intel Hns2600bpb24r
Intel Hns2600bpblc
Intel Hns2600bpblc24
Intel Hns2600bpblc24r
Intel Hns2600bpbr
Intel Hns2600bpq
Intel Hns2600bpq24

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

secure@intel.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12375?: CVE-2020-12375 is a medium-severity vulnerability in Intel Bmc_firmware, classified under Out-of-bounds Write. CVSS score: 6.7/10. Published 2021-02-17.
How severe is CVE-2020-12375?: Medium severity. CVSS v3 base score is 6.7 out of 10.