Lucene search

K
cvelistIntelCVELIST:CVE-2023-22661
HistoryMay 10, 2023 - 1:17 p.m.

CVE-2023-22661

2023-05-1013:17:02
CWE-120
intel
www.cve.org
1
buffer overflow
intel server board
bmc firmware
privilege escalation
local user

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0

Percentile

9.0%

Buffer overflow in some Intel® Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Server Board BMC firmware",
    "versions": [
      {
        "version": "before version 2.90",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-22661