Lucene search
IntelCVELIST:CVE-2023-22379HistoryMay 10, 2023 - 1:17 p.m.
CVE-2023-22379
2023-05-1013:17:05
CWE-20
intel
www.cve.org
1
input validation
intel server board
bmc firmware
information disclosure
privileged user
local access
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Improper input validation in some Intel® Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) Server Board BMC firmware",
"versions": [
{
"version": "before version 2.90",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2023-22379
2023-05-10 14:15:27
prion
prion
Input validation
2023-05-10 14:15:00
cve
cve
CVE-2023-22379
2023-05-10 14:15:27
intel
intel
Intel® Server Board BMC Firmware Advisory
2023-05-09 00:00:00
f5
f5
K000134781 : Multiple Intel Server Board BMC vulnerabilities
2023-05-25 00:00:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for CVELIST:CVE-2023-22379