Lucene search
HistoryMay 10, 2023 - 2:15 p.m.
CVE-2023-22297
cve-2023-22297
memory access
buffer overflow
privileged user
privilege escalation
local access
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Access of memory location after end of buffer in some Intel® Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.
Affected configurations
Node
intelserver_system_d50tnp1mhcrlc_firmwareRange<2.90
intelserver_system_d50tnp1mhcrlcMatch-
Node
intelserver_system_d50tnp1mhcpac_firmwareRange<2.90
intelserver_system_d50tnp1mhcpacMatch-
Node
intelserver_system_d50tnp2mhsvac_firmwareRange<2.90
intelserver_system_d50tnp2mhsvacMatch-
Node
intelserver_system_d50tnp2mhstac_firmwareRange<2.90
intelserver_system_d50tnp2mhstacMatch-
Node
intelserver_system_d50tnp1mhcrac_firmwareRange<2.90
intelserver_system_d50tnp1mhcracMatch-
Node
intelserver_system_d50tnp2mfalac_firmwareRange<2.90
intelserver_system_d50tnp2mfalacMatch-
Node
intelserver_system_m50cyp1ur204_firmwareRange<2.90
intelserver_system_m50cyp1ur204Match-
Node
intelserver_system_m50cyp1ur212_firmwareRange<2.90
intelserver_system_m50cyp1ur212Match-
Node
intelserver_system_m50cyp2ur312_firmwareRange<2.90
intelserver_system_m50cyp2ur312Match-
Node
intelserver_system_m50cyp2ur208_firmwareRange<2.90
intelserver_system_m50cyp2ur208Match-
Related
prion
prion
Design/Logic Flaw
2023-05-10 14:15:00
cvelist
cvelist
CVE-2023-22297
2023-05-10 13:17:03
cve
cve
CVE-2023-22297
2023-05-10 14:15:26
intel
intel
Intel® Server Board BMC Firmware Advisory
2023-05-09 00:00:00
f5
f5
K000134781 : Multiple Intel Server Board BMC vulnerabilities
2023-05-25 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Related for NVD:CVE-2023-22297