Intel® BMC Advisory

🗓️ 28 Apr 2020 00:00:00Reported by Intel Security CenterType

Potential security vulnerabilities in Intel Baseboard Management Controller (BMC) firmware, leading to privilege escalation, denial of service, and information disclosure. Firmware updates to mitigate the vulnerabilities are being released

Reporter	Title	Published	Views	Family All 146
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from operations that exceed the buffer limits in memory, allowing an attacker to cause a system failure.	9 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from insufficient validation of input data. This allows a perpetrator to trigger a service failure.	9 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from insufficient validation of input data. This allows a perpetrator to disclose protected information.	9 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to incorrect session duration settings. This allows a perpetrator to disclose protected information or cause service failures.	9 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Baseboard Management Controller, a controller for remote control of a computer, arises from operations that go beyond the buffer in memory. This allows attackers to disclose sensitive information, enhance their privileges, or cause system failures.	9 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to reading data beyond the buffer in memory, allowing an intruder to disclose protected information.	13 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) related to session management errors allows a perpetrator to disclose sensitive information or cause service failures.	13 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) allows a intruder to trigger a service failure or gain unauthorized access to protected information.	26 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to trigger a service failure.	26 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to gain unauthorized access to protected information.	26 Dec 201900:00	–	bdu_fstec

12 Nov 2019 00:00Current

8High risk

Vulners AI Score8

CVSS 27.8

CVSS 3.19.8

EPSS0.01561