Published: 07/12/2020 Updated: 08/12/2020

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Inspur NF5266M5 up to and including 3.21.2 and other server M5 devices allow remote code execution via administrator privileges. The Baseboard Management Controller (BMC) program of INSPUR server is weak in checking the firmware and lacks the signature verification mechanism, the attacker who obtains the administrator's rights can control the BMC by inserting malicious code into the firmware program and bypassing the current verification mechanism to upgrade the BMC.

Vulnerable Product	Search on Vulmon	Subscribe to Product
inspur nf8480m5_firmware
inspur nf8260m5_firmware
inspur ns5162m5_firmware
inspur ns5488m5_firmware
inspur ns5484m5_firmware
inspur ns5482m5_firmware
inspur nf5280m5_firmware
inspur nf5468m5_firmware
inspur nf5488m5-d_firmware
inspur nf5180m5_firmware
inspur nf5270m5_firmware
inspur nf5260m5_firmware
inspur nf5266m5_firmware
inspur nf5466m5_firmware
inspur nf5486m5_firmware

CWE-347 https://en.inspur.com/en/2487134/index.html https://en.inspur.com/en/security_bulletins/security_advisory2/2543921/index.html https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-26122

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect