CVE-2020-24475 — Improper Initialization in Intel Baseboard Management Controller Firmware

CWE-665 — Improper Initialization3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 84.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Baseboard Management Controller Firmware

Timeline

PublishedJun 9

Latest updateMay 24

Description

Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

▶NVDintel/baseboard_management_controller_firmware< 2.48.ce3e3bd2

🔴Vulnerability Details

GHSA

GHSA-r26h-xpx8-fmx6: Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2↗2022-05-24

▶

CVEList

CVE-2020-24475: Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2↗2021-06-09

▶