PT-2021-1985 · Intel · Intel Server Systems+2

Published 2021-02-09 · Updated 2021-02-22 · CVE-2020-12376

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Server Boards, Server Systems and Compute Modules versions prior to 2.47

Description The issue is related to the use of a hard-coded key in the BMC firmware, which may allow an authenticated user to potentially enable information disclosure via local access. This could lead to unauthorized access to protected information.

Recommendations For versions prior to 2.47, update to version 2.47 or later to resolve the issue. As a temporary workaround, consider restricting local access to the BMC firmware to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

BDU:2021-00813

CVE-2020-12376

Affected Products

Intel Compute Modules

Intel Server Boards

Intel Server Systems

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00434.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00813 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12376 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12376 · Vendor Advisory
• https://t.me/cvenotify/10046 · Telegram Post