CVE-2020-12376 - Vulnerability Details

Vendors	Products
Intel	Bmc Firmware Hns2600bpb Hns2600bpb24 Hns2600bpb24r Hns2600bpblc Hns2600bpblc24 Hns2600bpblc24r Hns2600bpbr Hns2600bpq Hns2600bpq24 Hns2600bpq24r Hns2600bpqr Hns2600bps Hns2600bps24 Hns2600bps24r Hns2600bpsr R1000wf R1208wfqysr R1208wftys R1208wftysr R1304wf0ys R1304wf0ysr R1304wftys R1304wftysr R2208wf0zs R2208wf0zsr R2208wfqzs R2208wfqzsr R2208wftzs R2208wftzsr R2224wfqzs R2224wftzs R2224wftzsr R2308wftzs R2308wftzsr R2312wf0np R2312wf0npr R2312wfqzs R2312wftzs R2312wftzsr S2600bpbr S2600bpqr S2600bpsr S2600stb S2600stq S2600wf0 S2600wfq S2600wft

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Intel(R) Server Boards, Server Systems and Compute Modules", "vendor": "n/a", "versions": [{"status": "affected", "version": "before version 2.47"}]}], "descriptions": [{"lang": "en", "value": "Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access."}], "problemTypes": [{"descriptions": [{"description": "information disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-02-17T13:56:08", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "ID": "CVE-2020-12376", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel(R) Server Boards, Server Systems and Compute Modules", "version": {"version_data": [{"version_value": "before version 2.47"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "information disclosure"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html", "refsource": "MISC", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T11:56:51.809Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html"}]}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2020-12376", "datePublished": "2021-02-17T13:56:08", "dateReserved": "2020-04-28T00:00:00", "dateUpdated": "2024-08-04T11:56:51.809Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Intel(R) Server Boards, Server Systems and Compute Modules (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : before version 2.47 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : information disclosure (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-02-17T13:56:08 (string)

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secure@intel.com (string)

ID : CVE-2020-12376 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Intel(R) Server Boards, Server Systems and Compute Modules (string)

version : { »

version_data : [ »

0 : { »

version_value : before version 2.47 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : information disclosure (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html (string)

refsource : MISC (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T11:56:51.809Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

assignerShortName : intel (string)

cveId : CVE-2020-12376 (string)

datePublished : 2021-02-17T13:56:08 (string)

dateReserved : 2020-04-28T00:00:00 (string)

dateUpdated : 2024-08-04T11:56:51.809Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15CF9AD6-8F14-40FC-8657-8BC57B595ED2", "versionEndExcluding": "2.47", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F08CC45-9AC9-4A00-83B9-F9D4970B0DE8", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F002684-C456-40F0-AA2A-97C79AE5EECA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpb24r:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B4E1CD8-2A13-4BC9-87D9-24E9E0897500", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:*", "matchCriteriaId": "796E437A-B972-4D30-B0A4-53366693C7DF", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D9CC284-540E-492A-A0E6-A193DEAD3102", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpblc24r:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CC9E77D-DDB7-41AB-8728-9782336C167B", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpbr:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE6E2091-967D-4BA1-B190-9A2D13FE4AFD", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:*", "matchCriteriaId": "24786B0E-36AC-4DBD-8778-DC836CF81CB1", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:*", "matchCriteriaId": "613CDC12-2D3E-4BF3-AE2D-DCDEBEAED03D", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpq24r:-:*:*:*:*:*:*:*", "matchCriteriaId": "0431FDBE-4A58-40B1-B635-225E5B9EDBBB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpqr:-:*:*:*:*:*:*:*", "matchCriteriaId": "7138CA16-5DDA-4CAB-AF4F-6B4127C1055F", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EADDC0-0AAE-4445-9764-1C54E3898FFD", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:*", "matchCriteriaId": "E09B1290-FAD0-4869-A1FA-A4D12BB602CD", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bps24r:-:*:*:*:*:*:*:*", "matchCriteriaId": "86739A74-AE8B-4699-8C1B-AC5D30C4FA50", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:hns2600bpsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD891C11-B432-4B87-96BE-7C8BFA76E801", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1000wf:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D5E07CC-3948-4664-AE8E-0517D9D66211", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1208wfqysr:-:*:*:*:*:*:*:*", "matchCriteriaId": "85763067-E9E5-4418-A51F-FF3DD3710F9B", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1DD69C7-9E7C-4569-9971-A06F77028BB7", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1208wftysr:-:*:*:*:*:*:*:*", "matchCriteriaId": "3506908A-8081-4ADA-A986-E02415956AB4", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*", "matchCriteriaId": "0DEF6206-E94C-4C16-8D91-AD776D62F79F", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1304wf0ysr:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1E6AFA4-49E7-4191-9EA2-7E2EE269067B", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A47AC30-315C-4E4B-BBBB-305FA5131281", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r1304wftysr:-:*:*:*:*:*:*:*", "matchCriteriaId": "48054F35-53C1-4480-86E2-CB8260DD84B6", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF575955-C7E1-4DD6-8AAE-5930EDFEDA93", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wf0zsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "8029A5F9-E999-4BA9-AA77-14A73B83454E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B83196F-06BD-41D6-A6B8-C7ABD25CA238", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wfqzsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "07C54A6D-7193-4AC3-A1E5-3CE16DF54FCB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "30E49457-D38D-4145-81F2-7FA4D463CD24", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2208wftzsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "7BB1E675-B059-4F28-8EBA-9FA5EF6E4044", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "13C6540A-C5E4-46E5-BB7C-E4C53904AE68", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "D952C1D5-581F-4ADC-8DB5-3682DC8588CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2224wftzsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D6DFA67-F1EE-4DBB-8E7B-CCDF097DC8BE", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "31EF6A93-7FDE-43A7-BB5D-1DD52318F60D", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2308wftzsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3183B56-D5BB-4010-B2EE-3427D796D2A1", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*", "matchCriteriaId": "98B6DF59-DF1E-4D9C-B574-37DC398B16AB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wf0npr:-:*:*:*:*:*:*:*", "matchCriteriaId": "931E4D81-FAF0-4BFF-92E0-D5F653C5E845", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "6982CB5F-4448-48D4-BD3A-782874AB2304", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*", "matchCriteriaId": "B14E3D1D-B614-458D-8F78-E25CC89B311E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:r2312wftzsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "81818501-4F4A-4CED-895D-84D6DC139811", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600bpbr:-:*:*:*:*:*:*:*", "matchCriteriaId": "68606D69-C913-492A-A00E-3D899AB42595", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600bpqr:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D292D7D-1E22-440F-B30C-3C580AFE91C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600bpsr:-:*:*:*:*:*:*:*", "matchCriteriaId": "C89B4E6B-B742-4BCA-9547-B1C6059C6671", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:*", "matchCriteriaId": "A08E8AD9-CA53-4F39-820E-D4A4D2D319EB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DDFAF1C-E386-4F35-8A81-492713F10A92", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600wf0:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D8B99E9-63EF-45FA-AD23-1CEBDB3DD41E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*", "matchCriteriaId": "F105271A-9DC1-42CE-9D19-E4A55BE1F04E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4BEA962-CEFF-429C-BB64-1C3FEA98FCE9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access."}, {"lang": "es", "value": "Un uso de una clave embebida en el firmware BMC para algunos Intel\u00ae Server Boards, Server Systems and Compute Modules versiones anteriores a 2.47, puede permitir que el usuario autenticado habilitar potencialmente una divulgaci\u00f3n de informaci\u00f3n por medio de un acceso local"}], "id": "CVE-2020-12376", "lastModified": "2024-11-21T04:59:36.473", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-02-17T14:15:15.810", "references": [{"source": "secure@intel.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:bmc_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 15CF9AD6-8F14-40FC-8657-8BC57B595ED2 (string)

versionEndExcluding : 2.47 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:intel:hns2600bpb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4F08CC45-9AC9-4A00-83B9-F9D4970B0DE8 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:intel:hns2600bpb24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F002684-C456-40F0-AA2A-97C79AE5EECA (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:intel:hns2600bpb24r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B4E1CD8-2A13-4BC9-87D9-24E9E0897500 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:intel:hns2600bpblc:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 796E437A-B972-4D30-B0A4-53366693C7DF (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:intel:hns2600bpblc24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0D9CC284-540E-492A-A0E6-A193DEAD3102 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:intel:hns2600bpblc24r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5CC9E77D-DDB7-41AB-8728-9782336C167B (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:intel:hns2600bpbr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DE6E2091-967D-4BA1-B190-9A2D13FE4AFD (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:intel:hns2600bpq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 24786B0E-36AC-4DBD-8778-DC836CF81CB1 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:intel:hns2600bpq24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 613CDC12-2D3E-4BF3-AE2D-DCDEBEAED03D (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:intel:hns2600bpq24r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0431FDBE-4A58-40B1-B635-225E5B9EDBBB (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:intel:hns2600bpqr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7138CA16-5DDA-4CAB-AF4F-6B4127C1055F (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:intel:hns2600bps:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F9EADDC0-0AAE-4445-9764-1C54E3898FFD (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:intel:hns2600bps24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E09B1290-FAD0-4869-A1FA-A4D12BB602CD (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:intel:hns2600bps24r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 86739A74-AE8B-4699-8C1B-AC5D30C4FA50 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:intel:hns2600bpsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD891C11-B432-4B87-96BE-7C8BFA76E801 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:intel:r1000wf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9D5E07CC-3948-4664-AE8E-0517D9D66211 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:intel:r1208wfqysr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 85763067-E9E5-4418-A51F-FF3DD3710F9B (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F1DD69C7-9E7C-4569-9971-A06F77028BB7 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:intel:r1208wftysr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3506908A-8081-4ADA-A986-E02415956AB4 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0DEF6206-E94C-4C16-8D91-AD776D62F79F (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:intel:r1304wf0ysr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A1E6AFA4-49E7-4191-9EA2-7E2EE269067B (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A47AC30-315C-4E4B-BBBB-305FA5131281 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:intel:r1304wftysr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 48054F35-53C1-4480-86E2-CB8260DD84B6 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EF575955-C7E1-4DD6-8AAE-5930EDFEDA93 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:intel:r2208wf0zsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8029A5F9-E999-4BA9-AA77-14A73B83454E (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B83196F-06BD-41D6-A6B8-C7ABD25CA238 (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:intel:r2208wfqzsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 07C54A6D-7193-4AC3-A1E5-3CE16DF54FCB (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 30E49457-D38D-4145-81F2-7FA4D463CD24 (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:intel:r2208wftzsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7BB1E675-B059-4F28-8EBA-9FA5EF6E4044 (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 13C6540A-C5E4-46E5-BB7C-E4C53904AE68 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D952C1D5-581F-4ADC-8DB5-3682DC8588CA (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:intel:r2224wftzsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7D6DFA67-F1EE-4DBB-8E7B-CCDF097DC8BE (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 31EF6A93-7FDE-43A7-BB5D-1DD52318F60D (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:intel:r2308wftzsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F3183B56-D5BB-4010-B2EE-3427D796D2A1 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 98B6DF59-DF1E-4D9C-B574-37DC398B16AB (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:intel:r2312wf0npr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 931E4D81-FAF0-4BFF-92E0-D5F653C5E845 (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6982CB5F-4448-48D4-BD3A-782874AB2304 (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B14E3D1D-B614-458D-8F78-E25CC89B311E (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:intel:r2312wftzsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 81818501-4F4A-4CED-895D-84D6DC139811 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:intel:s2600bpbr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68606D69-C913-492A-A00E-3D899AB42595 (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:intel:s2600bpqr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9D292D7D-1E22-440F-B30C-3C580AFE91C9 (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:intel:s2600bpsr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C89B4E6B-B742-4BCA-9547-B1C6059C6671 (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:intel:s2600stb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A08E8AD9-CA53-4F39-820E-D4A4D2D319EB (string)

vulnerable : false (boolean)

}

43 : { »

criteria : cpe:2.3:h:intel:s2600stq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6DDFAF1C-E386-4F35-8A81-492713F10A92 (string)

vulnerable : false (boolean)

}

44 : { »

criteria : cpe:2.3:h:intel:s2600wf0:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D8B99E9-63EF-45FA-AD23-1CEBDB3DD41E (string)

vulnerable : false (boolean)

}

45 : { »

criteria : cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F105271A-9DC1-42CE-9D19-E4A55BE1F04E (string)

vulnerable : false (boolean)

}

46 : { »

criteria : cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D4BEA962-CEFF-429C-BB64-1C3FEA98FCE9 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access. (string)

}

1 : { »

lang : es (string)

value : Un uso de una clave embebida en el firmware BMC para algunos Intel® Server Boards, Server Systems and Compute Modules versiones anteriores a 2.47, puede permitir que el usuario autenticado habilitar potencialmente una divulgación de información por medio de un acceso local (string)

}

]

id : CVE-2020-12376 (string)

lastModified : 2024-11-21T04:59:36.473 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 2.1 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:L/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-02-17T14:15:15.810 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-798 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object