Lucene search

K
nvd[email protected]NVD:CVE-2023-22379
HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-22379

2023-05-1014:15:27
CWE-20
web.nvd.nist.gov
cve-2023-22379
intel server board
input validation
information disclosure
local access

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Improper input validation in some Intelยฎ Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

Affected configurations

NVD
Node
intelserver_system_d50tnp1mhcrlc_firmwareRange<2.90
AND
intelserver_system_d50tnp1mhcrlcMatch-
Node
intelserver_system_d50tnp1mhcpac_firmwareRange<2.90
AND
intelserver_system_d50tnp1mhcpacMatch-
Node
intelserver_system_d50tnp2mhsvac_firmwareRange<2.90
AND
intelserver_system_d50tnp2mhsvacMatch-
Node
intelserver_system_d50tnp2mhstac_firmwareRange<2.90
AND
intelserver_system_d50tnp2mhstacMatch-
Node
intelserver_system_d50tnp1mhcrac_firmwareRange<2.90
AND
intelserver_system_d50tnp1mhcracMatch-
Node
intelserver_system_d50tnp2mfalac_firmwareRange<2.90
AND
intelserver_system_d50tnp2mfalacMatch-
Node
intelserver_system_m50cyp1ur204_firmwareRange<2.90
AND
intelserver_system_m50cyp1ur204Match-
Node
intelserver_system_m50cyp1ur212_firmwareRange<2.90
AND
intelserver_system_m50cyp1ur212Match-
Node
intelserver_system_m50cyp2ur312_firmwareRange<2.90
AND
intelserver_system_m50cyp2ur312Match-
Node
intelserver_system_m50cyp2ur208_firmwareRange<2.90
AND
intelserver_system_m50cyp2ur208Match-

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for NVD:CVE-2023-22379