Lucene search
HistoryMay 10, 2023 - 2:15 p.m.
CVE-2023-25545
cve-2023-25545
buffer restrictions
intel server board
privileged user
local access
escalation of privilege
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Improper buffer restrictions in some Intel® Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.
Affected configurations
Node
intelserver_system_d50tnp1mhcrlc_firmwareRange<2.90
intelserver_system_d50tnp1mhcrlcMatch-
Node
intelserver_system_d50tnp1mhcpac_firmwareRange<2.90
intelserver_system_d50tnp1mhcpacMatch-
Node
intelserver_system_d50tnp2mhsvac_firmwareRange<2.90
intelserver_system_d50tnp2mhsvacMatch-
Node
intelserver_system_d50tnp2mhstac_firmwareRange<2.90
intelserver_system_d50tnp2mhstacMatch-
Node
intelserver_system_d50tnp1mhcrac_firmwareRange<2.90
intelserver_system_d50tnp1mhcracMatch-
Node
intelserver_system_d50tnp2mfalac_firmwareRange<2.90
intelserver_system_d50tnp2mfalacMatch-
Node
intelserver_system_m50cyp1ur204Match-
intelserver_system_m50cyp1ur204_firmwareRange<2.90
Node
intelserver_system_m50cyp1ur212Match-
intelserver_system_m50cyp1ur212_firmwareRange<2.90
Node
intelserver_system_m50cyp2ur312Match-
intelserver_system_m50cyp2ur312_firmwareRange<2.90
Node
intelserver_system_m50cyp2ur208Match-
intelserver_system_m50cyp2ur208_firmwareRange<2.90
Related
prion
prion
Buffer overflow
2023-05-10 14:15:00
cve
cve
CVE-2023-25545
2023-05-10 14:15:32
cvelist
cvelist
CVE-2023-25545
2023-05-10 13:17:04
intel
intel
Intel® Server Board BMC Firmware Advisory
2023-05-09 00:00:00
f5
f5
K000134781 : Multiple Intel Server Board BMC vulnerabilities
2023-05-25 00:00:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2023-25545