What is CVE-2020-12376?

CVE-2020-12376 is a medium-severity vulnerability in Intel Bmc_firmware, classified under Use of Hard-coded Credentials. CVSS score: 5.5/10. Published 2021-02-17.

How severe is CVE-2020-12376?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Intel Bmc_firmware

CVE-2020-12376

Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access.

EPSS: 0.002 (14.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Intel Bmc_firmware
Intel Hns2600bpb
Intel Hns2600bpb24
Intel Hns2600bpb24r
Intel Hns2600bpblc
Intel Hns2600bpblc24
Intel Hns2600bpblc24r
Intel Hns2600bpbr
Intel Hns2600bpq
Intel Hns2600bpq24

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

secure@intel.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12376?: CVE-2020-12376 is a medium-severity vulnerability in Intel Bmc_firmware, classified under Use of Hard-coded Credentials. CVSS score: 5.5/10. Published 2021-02-17.
How severe is CVE-2020-12376?: Medium severity. CVSS v3 base score is 5.5 out of 10.