Lucene search

K
nvd[email protected]NVD:CVE-2023-22442
HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-22442

2023-05-1014:15:28
CWE-787
web.nvd.nist.gov
intel server board
firmware
out of bounds write
escalation of privilege
local access

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

9.0%

Out of bounds write in some Intel® Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelserver_system_d50tnp1mhcrlc_firmwareRange<2.90
AND
intelserver_system_d50tnp1mhcrlcMatch-
Node
intelserver_system_d50tnp1mhcpac_firmwareRange<2.90
AND
intelserver_system_d50tnp1mhcpacMatch-
Node
intelserver_system_d50tnp2mhsvac_firmwareRange<2.90
AND
intelserver_system_d50tnp2mhsvacMatch-
Node
intelserver_system_d50tnp2mhstac_firmwareRange<2.90
AND
intelserver_system_d50tnp2mhstacMatch-
Node
intelserver_system_d50tnp1mhcrac_firmwareRange<2.90
AND
intelserver_system_d50tnp1mhcracMatch-
Node
intelserver_system_d50tnp2mfalac_firmwareRange<2.90
AND
intelserver_system_d50tnp2mfalacMatch-
Node
intelserver_system_m50cyp1ur204_firmwareRange<2.90
AND
intelserver_system_m50cyp1ur204Match-
Node
intelserver_system_m50cyp1ur212_firmwareRange<2.90
AND
intelserver_system_m50cyp1ur212Match-
Node
intelserver_system_m50cyp2ur312_firmwareRange<2.90
AND
intelserver_system_m50cyp2ur312Match-
Node
intelserver_system_m50cyp2ur208_firmwareRange<2.90
AND
intelserver_system_m50cyp2ur208Match-

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

9.0%

Related for NVD:CVE-2023-22442