Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-24474 Details

Description

Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html	CVE	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	[email protected]

Affected Products

Product	Versions
intel baseboard management controller firmware	< 2.48.ce3e3bd2
CPE cpe:2.3:o:intel:baseboard_management_controller_firmware:::::::: Remediation No remediation found in references.
intel compute module hns2600bpb24r	All versions
CPE cpe:2.3:h:intel:compute_module_hns2600bpb24r:-:::::::* Remediation No remediation found in references.
intel compute module hns2600bpbr	All versions
CPE cpe:2.3:h:intel:compute_module_hns2600bpbr:-:::::::* Remediation No remediation found in references.
intel compute module hns2600bpq24r	All versions
CPE cpe:2.3:h:intel:compute_module_hns2600bpq24r:-:::::::* Remediation No remediation found in references.
intel compute module hns2600bpqr	All versions
CPE cpe:2.3:h:intel:compute_module_hns2600bpqr:-:::::::* Remediation No remediation found in references.
intel compute module hns2600bps24r	All versions
CPE cpe:2.3:h:intel:compute_module_hns2600bps24r:-:::::::* Remediation No remediation found in references.
intel compute module hns2600bpsr	All versions
CPE cpe:2.3:h:intel:compute_module_hns2600bpsr:-:::::::* Remediation No remediation found in references.
intel server board s2600bpb	All versions
CPE cpe:2.3:h:intel:server_board_s2600bpb:-:::::::* Remediation No remediation found in references.
intel server board s2600bpbr	All versions
CPE cpe:2.3:h:intel:server_board_s2600bpbr:-:::::::* Remediation No remediation found in references.
intel server board s2600bpq	All versions
CPE cpe:2.3:h:intel:server_board_s2600bpq:-:::::::* Remediation No remediation found in references.
intel server board s2600bpqr	All versions
CPE cpe:2.3:h:intel:server_board_s2600bpqr:-:::::::* Remediation No remediation found in references.
intel server board s2600bps	All versions
CPE cpe:2.3:h:intel:server_board_s2600bps:-:::::::* Remediation No remediation found in references.
intel server board s2600bpsr	All versions
CPE cpe:2.3:h:intel:server_board_s2600bpsr:-:::::::* Remediation No remediation found in references.
intel server board s2600stb	All versions
CPE cpe:2.3:h:intel:server_board_s2600stb:-:::::::* Remediation No remediation found in references.
intel server board s2600stbr	All versions
CPE cpe:2.3:h:intel:server_board_s2600stbr:-:::::::* Remediation No remediation found in references.
intel server board s2600stq	All versions
CPE cpe:2.3:h:intel:server_board_s2600stq:-:::::::* Remediation No remediation found in references.
intel server board s2600stqr	All versions
CPE cpe:2.3:h:intel:server_board_s2600stqr:-:::::::* Remediation No remediation found in references.
intel server board s2600wf0	All versions
CPE cpe:2.3:h:intel:server_board_s2600wf0:-:::::::* Remediation No remediation found in references.
intel server board s2600wf0r	All versions
CPE cpe:2.3:h:intel:server_board_s2600wf0r:-:::::::* Remediation No remediation found in references.
intel server board s2600wfq	All versions
CPE cpe:2.3:h:intel:server_board_s2600wfq:-:::::::* Remediation No remediation found in references.
intel server board s2600wfqr	All versions
CPE cpe:2.3:h:intel:server_board_s2600wfqr:-:::::::* Remediation No remediation found in references.
intel server board s2600wft	All versions
CPE cpe:2.3:h:intel:server_board_s2600wft:-:::::::* Remediation No remediation found in references.
intel server board s2600wftr	All versions
CPE cpe:2.3:h:intel:server_board_s2600wftr:-:::::::* Remediation No remediation found in references.
intel server system r1208wfqysr	All versions
CPE cpe:2.3:h:intel:server_system_r1208wfqysr:-:::::::* Remediation No remediation found in references.
intel server system r1208wftys	All versions
CPE cpe:2.3:h:intel:server_system_r1208wftys:-:::::::* Remediation No remediation found in references.
intel server system r1208wftysr	All versions
CPE cpe:2.3:h:intel:server_system_r1208wftysr:-:::::::* Remediation No remediation found in references.
intel server system r1304wf0ys	All versions
CPE cpe:2.3:h:intel:server_system_r1304wf0ys:-:::::::* Remediation No remediation found in references.
intel server system r1304wf0ysr	All versions
CPE cpe:2.3:h:intel:server_system_r1304wf0ysr:-:::::::* Remediation No remediation found in references.
intel server system r1304wftys	All versions
CPE cpe:2.3:h:intel:server_system_r1304wftys:-:::::::* Remediation No remediation found in references.
intel server system r1304wftysr	All versions
CPE cpe:2.3:h:intel:server_system_r1304wftysr:-:::::::* Remediation No remediation found in references.
intel server system r2208wf0zs	All versions
CPE cpe:2.3:h:intel:server_system_r2208wf0zs:-:::::::* Remediation No remediation found in references.
intel server system r2208wf0zsr	All versions
CPE cpe:2.3:h:intel:server_system_r2208wf0zsr:-:::::::* Remediation No remediation found in references.
intel server system r2208wfqzs	All versions
CPE cpe:2.3:h:intel:server_system_r2208wfqzs:-:::::::* Remediation No remediation found in references.
intel server system r2208wfqzsr	All versions
CPE cpe:2.3:h:intel:server_system_r2208wfqzsr:-:::::::* Remediation No remediation found in references.
intel server system r2208wftzs	All versions
CPE cpe:2.3:h:intel:server_system_r2208wftzs:-:::::::* Remediation No remediation found in references.
intel server system r2208wftzsr	All versions
CPE cpe:2.3:h:intel:server_system_r2208wftzsr:-:::::::* Remediation No remediation found in references.
intel server system r2224wfqzs	All versions
CPE cpe:2.3:h:intel:server_system_r2224wfqzs:-:::::::* Remediation No remediation found in references.
intel server system r2224wftzs	All versions
CPE cpe:2.3:h:intel:server_system_r2224wftzs:-:::::::* Remediation No remediation found in references.
intel server system r2224wftzsr	All versions
CPE cpe:2.3:h:intel:server_system_r2224wftzsr:-:::::::* Remediation No remediation found in references.
intel server system r2308wftzs	All versions
CPE cpe:2.3:h:intel:server_system_r2308wftzs:-:::::::* Remediation No remediation found in references.
intel server system r2308wftzsr	All versions
CPE cpe:2.3:h:intel:server_system_r2308wftzsr:-:::::::* Remediation No remediation found in references.
intel server system r2312wf0np	All versions
CPE cpe:2.3:h:intel:server_system_r2312wf0np:-:::::::* Remediation No remediation found in references.
intel server system r2312wf0npr	All versions
CPE cpe:2.3:h:intel:server_system_r2312wf0npr:-:::::::* Remediation No remediation found in references.
intel server system r2312wfqzs	All versions
CPE cpe:2.3:h:intel:server_system_r2312wfqzs:-:::::::* Remediation No remediation found in references.
intel server system r2312wftzs	All versions
CPE cpe:2.3:h:intel:server_system_r2312wftzs:-:::::::* Remediation No remediation found in references.
intel server system r2312wftzsr	All versions
CPE cpe:2.3:h:intel:server_system_r2312wftzsr:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jul 1, 2021	Initial Analysis	[email protected]

CVE-2020-24474 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation