CVE-2023-22661

🗓️ 10 May 2023 13:17:02Reported by intelType

Buffer overflow in Intel Server Board BMC firmware allows privilege escalation via local access

Reporter	Title	Published	Views	Family All 11
CNNVD	Intel Server Board 安全漏洞	10 May 202300:00	–	cnnvd
Cvelist	CVE-2023-22661	10 May 202313:17	–	cvelist
EUVD	EUVD-2023-26791	3 Oct 202520:07	–	euvd
F5 Networks	K000134781: Multiple Intel Server Board BMC vulnerabilities	25 May 202303:17	–	f5
Intel	Intel® Server Board BMC Firmware Advisory	9 May 202300:00	–	intel
NVD	CVE-2023-22661	10 May 202314:15	–	nvd
OSV	CVE-2023-22661	10 May 202314:15	–	osv
Prion	Buffer overflow	10 May 202314:15	–	prion
Positive Technologies	PT-2023-18610 · Intel · Intel Server Board Bmc Firmware	10 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-22661	23 May 202503:15	–	redhatcve

NVD

Vulners

Node

intel server_system_d50tnp1mhcrlc_firmwareRange<2.90

AND

intel server_system_d50tnp1mhcrlcMatch-

Node

intel server_system_d50tnp1mhcpac_firmwareRange<2.90

AND

intel server_system_d50tnp1mhcpacMatch-

Node

intel server_system_d50tnp2mhsvac_firmwareRange<2.90

AND

intel server_system_d50tnp2mhsvacMatch-

Node

intel server_system_d50tnp2mhstac_firmwareRange<2.90

AND

intel server_system_d50tnp2mhstacMatch-

Node

intel server_system_d50tnp1mhcrac_firmwareRange<2.90

AND

intel server_system_d50tnp1mhcracMatch-

Node

intel server_system_d50tnp2mfalac_firmwareRange<2.90

AND

intel server_system_d50tnp2mfalacMatch-

Node

intel server_system_m50cyp1ur204_firmwareRange<2.90

AND

intel server_system_m50cyp1ur204Match-

Node

intel server_system_m50cyp1ur212_firmwareRange<2.90

AND

intel server_system_m50cyp1ur212Match-

Node

intel server_system_m50cyp2ur312_firmwareRange<2.90

AND

intel server_system_m50cyp2ur312Match-

Node

intel server_system_m50cyp2ur208_firmwareRange<2.90

AND

intel server_system_m50cyp2ur208Match-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Server Board BMC firmware",
    "versions": [
      {
        "version": "before version 2.90",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html

21 Nov 2024 07:45Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8 - 8.2

EPSS0.00046

SSVC

CWE-120