Lucene search
IntelCVELIST:CVE-2023-22297HistoryMay 10, 2023 - 1:17 p.m.
CVE-2023-22297
2023-05-1013:17:03
CWE-788
intel
www.cve.org
cve-2023-22297
memory access
buffer overflow
privileged user
escalation of privilege
local access
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Access of memory location after end of buffer in some Intel® Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) Server Board BMC firmware",
"versions": [
{
"version": "before version 2.90",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
prion
prion
Design/Logic Flaw
2023-05-10 14:15:00
nvd
nvd
CVE-2023-22297
2023-05-10 14:15:26
cve
cve
CVE-2023-22297
2023-05-10 14:15:26
intel
intel
Intel® Server Board BMC Firmware Advisory
2023-05-09 00:00:00
f5
f5
K000134781 : Multiple Intel Server Board BMC vulnerabilities
2023-05-25 00:00:00
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Related for CVELIST:CVE-2023-22297