CVE-2023-31189

🗓️ 14 Feb 2024 13:37:52Reported by intelType

Improper authentication in Intel(R) Server Product OpenBMC firmware may enable privilege escalation

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-31189	6 Mar 202412:11	–	circl
CNNVD	Intel Server Product OpenBMC Security Vulnerability	14 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-31189	14 Feb 202413:37	–	cvelist
EUVD	EUVD-2023-35505	14 Jan 202618:31	–	euvd
Intel	Intel® Server OpenBMC Firmware Advisory	13 Feb 202400:00	–	intel
NVD	CVE-2023-31189	14 Feb 202414:15	–	nvd
Prion	Authentication flaw	14 Feb 202414:15	–	prion
Positive Technologies	PT-2024-1781 · Intel · Openbmc	14 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-31189	9 Jan 202609:27	–	redhatcve
Vulnrichment	CVE-2023-31189	14 Feb 202413:37	–	vulnrichment

NVD

Node

intel openbmcRange<egs-1.09

AND

intel xeon_bronze_3408uMatch-

intel xeon_gold_5403nMatch-

intel xeon_gold_5411nMatch-

intel xeon_gold_5412uMatch-

intel xeon_gold_5415+Match-

intel xeon_gold_5416sMatch-

intel xeon_gold_5418nMatch-

intel xeon_gold_5418yMatch-

intel xeon_gold_5420+Match-

intel xeon_gold_5423nMatch-

intel xeon_gold_5433nMatch-

intel xeon_gold_6403nMatch-

intel xeon_gold_6414uMatch-

intel xeon_gold_6416hMatch-

intel xeon_gold_6418hMatch-

intel xeon_gold_6421nMatch-

intel xeon_gold_6423nMatch-

intel xeon_gold_6426yMatch-

intel xeon_gold_6428nMatch-

intel xeon_gold_6430Match-

intel xeon_gold_6433nMatch-

intel xeon_gold_6433neMatch-

intel xeon_gold_6434Match-

intel xeon_gold_6434hMatch-

intel xeon_gold_6438mMatch-

intel xeon_gold_6438nMatch-

intel xeon_gold_6438y+Match-

intel xeon_gold_6442yMatch-

intel xeon_gold_6443nMatch-

intel xeon_gold_6444yMatch-

intel xeon_gold_6448hMatch-

intel xeon_gold_6448yMatch-

intel xeon_gold_6454sMatch-

intel xeon_gold_6458qMatch-

intel xeon_platinum_8444hMatch-

intel xeon_platinum_8450hMatch-

intel xeon_platinum_8452yMatch-

intel xeon_platinum_8454hMatch-

intel xeon_platinum_8458pMatch-

intel xeon_platinum_8460hMatch-

intel xeon_platinum_8460y+Match-

intel xeon_platinum_8461vMatch-

intel xeon_platinum_8462y+Match-

intel xeon_platinum_8468Match-

intel xeon_platinum_8468hMatch-

intel xeon_platinum_8468vMatch-

intel xeon_platinum_8470Match-

intel xeon_platinum_8470nMatch-

intel xeon_platinum_8471nMatch-

intel xeon_platinum_8480+Match-

intel xeon_platinum_8490hMatch-

intel xeon_silver_4410tMatch-

intel xeon_silver_4410yMatch-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Server Product OpenBMC firmware",
    "versions": [
      {
        "version": "before version egs-1.09",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html

14 Jan 2026 18:29Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.2 - 8.8

EPSS0.00067

SSVC

CWE-287