What is CVE-2020-12380?

CVE-2020-12380 is a high-severity vulnerability in Intel Bmc_firmware, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2021-02-17.

How severe is CVE-2020-12380?

High severity. CVSS v3 base score is 7.8 out of 10.

Out-of-bounds Read in Intel Bmc_firmware

CVE-2020-12380

Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (17.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Bmc_firmware
Intel Hns2600bpb
Intel Hns2600bpb24
Intel Hns2600bpb24r
Intel Hns2600bpblc
Intel Hns2600bpblc24
Intel Hns2600bpblc24r
Intel Hns2600bpbr
Intel Hns2600bpq
Intel Hns2600bpq24

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

secure@intel.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12380?: CVE-2020-12380 is a high-severity vulnerability in Intel Bmc_firmware, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2021-02-17.
How severe is CVE-2020-12380?: High severity. CVSS v3 base score is 7.8 out of 10.