What is CVE-2020-12377?

CVE-2020-12377 is a high-severity vulnerability in Intel Bmc_firmware, classified under Improper Input Validation. CVSS score: 7.8/10. Published 2021-02-17.

How severe is CVE-2020-12377?

High severity. CVSS v3 base score is 7.8 out of 10.

Improper input validation in Intel Bmc_firmware

CVE-2020-12377

Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (17.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Bmc_firmware
Intel Hns2600bpb
Intel Hns2600bpb24
Intel Hns2600bpb24r
Intel Hns2600bpblc
Intel Hns2600bpblc24
Intel Hns2600bpblc24r
Intel Hns2600bpbr
Intel Hns2600bpq
Intel Hns2600bpq24

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

secure@intel.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12377?: CVE-2020-12377 is a high-severity vulnerability in Intel Bmc_firmware, classified under Improper Input Validation. CVSS score: 7.8/10. Published 2021-02-17.
How severe is CVE-2020-12377?: High severity. CVSS v3 base score is 7.8 out of 10.