PT-2021-1986

CVE-2020-12375

·

Published

2021-02-09

·

Updated

2021-02-22

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel Server Boards, Server Systems and Compute Modules versions prior to 2.47
Description The issue is related to a heap overflow in the BMC firmware, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to a buffer overflow in the dynamic memory. The exploitation of this issue can allow an attacker to elevate their privileges.
Recommendations For versions prior to 2.47, update to version 2.47 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾