CVE-2020-12376

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published: Feb 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-123777.8Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 ma CVE-2020-12388.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co CVE-2020-123807.8Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an CVE-2020-123847.8Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enabl CVE-2020-123857.8Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable CVE-2020-123865.5Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable den CVE-2020-123878.1A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable CVE-2020-1238810.0The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only af CVE-2020-1238910.0The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only af CVE-2020-12398.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co CVE-2020-123909.8Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.CVE-2020-123917.5Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allowed the execution of scri