CVE-2023-31189

🗓️ 14 Feb 2024 13:37:52Reported by intelType

Improper authentication in Intel(R) Server Product OpenBMC firmware may enable privilege escalation

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the BMC implementation for Intel Server Product OpenBMC-based servers stems from deficiencies in the authentication process, allowing attackers to escalate their privileges.	22 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-31189	6 Mar 202412:11	–	circl
CNNVD	Intel Server Product OpenBMC Security Vulnerability	14 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-31189	14 Feb 202413:37	–	cvelist
EUVD	EUVD-2023-35505	14 Jan 202618:31	–	euvd
Intel	Intel® Server OpenBMC Firmware Advisory	13 Feb 202400:00	–	intel
NVD	CVE-2023-31189	14 Feb 202414:15	–	nvd
Prion	Authentication flaw	14 Feb 202414:15	–	prion
Positive Technologies	PT-2024-1781 · Intel · Openbmc	14 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-31189	9 Jan 202609:27	–	redhatcve

NVD

Node

intel openbmcRange<egs-1.09

AND

intel xeon_bronze_3408uMatch-

intel xeon_gold_5403nMatch-

intel xeon_gold_5411nMatch-

intel xeon_gold_5412uMatch-

intel xeon_gold_5415+Match-

intel xeon_gold_5416sMatch-

intel xeon_gold_5418nMatch-

intel xeon_gold_5418yMatch-

intel xeon_gold_5420+Match-

intel xeon_gold_5423nMatch-

intel xeon_gold_5433nMatch-

intel xeon_gold_6403nMatch-

intel xeon_gold_6414uMatch-

intel xeon_gold_6416hMatch-

intel xeon_gold_6418hMatch-

intel xeon_gold_6421nMatch-

intel xeon_gold_6423nMatch-

intel xeon_gold_6426yMatch-

intel xeon_gold_6428nMatch-

intel xeon_gold_6430Match-

intel xeon_gold_6433nMatch-

intel xeon_gold_6433neMatch-

intel xeon_gold_6434Match-

intel xeon_gold_6434hMatch-

intel xeon_gold_6438mMatch-

intel xeon_gold_6438nMatch-

intel xeon_gold_6438y+Match-

intel xeon_gold_6442yMatch-

intel xeon_gold_6443nMatch-

intel xeon_gold_6444yMatch-

intel xeon_gold_6448hMatch-

intel xeon_gold_6448yMatch-

intel xeon_gold_6454sMatch-

intel xeon_gold_6458qMatch-

intel xeon_platinum_8444hMatch-

intel xeon_platinum_8450hMatch-

intel xeon_platinum_8452yMatch-

intel xeon_platinum_8454hMatch-

intel xeon_platinum_8458pMatch-

intel xeon_platinum_8460hMatch-

intel xeon_platinum_8460y+Match-

intel xeon_platinum_8461vMatch-

intel xeon_platinum_8462y+Match-

intel xeon_platinum_8468Match-

intel xeon_platinum_8468hMatch-

intel xeon_platinum_8468vMatch-

intel xeon_platinum_8470Match-

intel xeon_platinum_8470nMatch-

intel xeon_platinum_8471nMatch-

intel xeon_platinum_8480+Match-

intel xeon_platinum_8490hMatch-

intel xeon_silver_4410tMatch-

intel xeon_silver_4410yMatch-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Server Product OpenBMC firmware",
    "versions": [
      {
        "version": "before version egs-1.09",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html

14 Jan 2026 18:29Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.2 - 8.8

EPSS0.00067

SSVC

CWE-287