Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-5208

23
FAUCET Score

CVE-2020-5208 is a buffer overflow vulnerability affecting ipmitool versions prior to 1.8.19, specifically impacting Debian, Fedora, and openSUSE distributions. The flaw stems from inadequate validation of remote LAN data, potentially leading to remote code execution, especially when ipmitool operates with elevated privileges. With a CVSS score of 8.8 (High), this vulnerability can be exploited over the network with low complexity and no user interaction, resulting in high impact to confidentiality, integrity, and availability. While no public exploits (Metasploit, Nuclei, ExploitDB) or active exploitation (KEV) have been observed, and community discussion is minimal, the high FAUCET Risk Score of 70/100 indicates its significant potential danger.

Impacted Technologies

VendorProductVersion(s)CPE
1.8.18CPE matchmatch criteria
cpe:2.3:a:ipmitool_project:ipmitool:1.8.18:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
30CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
31CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.7HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.3
Impact Score
5.8
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.29%
Probability of exploitation in next 30 days
EPSS Percentile
87.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0329 is in the 86th percentile among its peer group of 17,823 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (22)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 19175-16820Fixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: 19176-16823Fixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: cbl2 ipmitool 1.8.18-21 on CBL Mariner 2.0Fixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.8.18-21
microsoftpatch availablevia msrc
Product: cm1 ipmitool 1.8.18-21 on CBL Mariner 1.0Fixed in: 1.8.18-21
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: ipmitool-0:1.8.18-6.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Telco Extended Update SupportFixed in: ipmitool-0:1.8.18-6.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Update Services for SAP SolutionsFixed in: ipmitool-0:1.8.18-6.el7_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.5 Extended Update SupportFixed in: ipmitool-0:1.8.18-9.el7_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Extended Update SupportFixed in: ipmitool-0:1.8.18-9.el7_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ipmitool-0:1.8.18-12.el8_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionsFixed in: ipmitool-0:1.8.18-12.el8_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: ipmitool-0:1.8.15-3.el6_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: ipmitool-0:1.8.18-9.el7_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.2 Advanced Update SupportFixed in: ipmitool-0:1.8.13-10.el7_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.3 Advanced Update SupportFixed in: ipmitool-0:1.8.15-8.el7_3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.3 Telco Extended Update SupportFixed in: ipmitool-0:1.8.15-8.el7_3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.3 Update Services for SAP SolutionsFixed in: ipmitool-0:1.8.15-8.el7_3
View patch

Vendor Advisories (3)

microsoft2020-Aug/CVE-2020-5208

CVE-2020-5208

Aug 11, 2020
microsoft2020-Feb/CVE-2020-5208Important

remote code execution vulnerability in ipmitool

Feb 11, 2020
redhatCVE-2020-5208Important

ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c

Feb 5, 2020

References

lists.opensuse.org / opensuse-security-announce/2020-02/msg00031.html
Mailing ListThird Party Advisory
github.com / ipmitool/ipmitool/commit/e824c23316ae50beb7f7488f2055ac65e8b341f2
PatchThird Party Advisory
github.com / ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
PatchThird Party Advisory
lists.debian.org / debian-lts-announce/2020/02/msg00006.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2021/06/msg00029.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/K2BPW66KDP4H36AGZXLED57A3O2Y6EQW
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/RYYEKUAUTCWICM77HOEGZDVVEUJLP4BP
security.gentoo.org / glsa/202101-03
Third Party Advisory