CVE-2023-35123

OpenBMC firmware vulnerability CVE-2023-35123 affects Intel® Server Platform OpenBMC Firmware prior to egs-1.14-0 and bhs-0.27. The issue is an uncaught exception in OpenBMC firmware that may allow an authenticated user to cause a denial of service via network access. Impact is reported as availa...

CVE-2023-49144

Out of bounds read in OpenBMC Firmware for some IntelR Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-49144

Out of bounds read in OpenBMC Firmware for some IntelR Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-49144

CVE-2023-49144 is an Out-of-bounds read in OpenBMC Firmware affecting certain Intel Server Platforms. The issue exists in OpenBMC Firmware prior to egs-1.15-0 and prior to bhs-0.27, potentially allowing a privileged user with local access to disclose information. Public sources (Intel advisory an...

CVE-2024-28947

Improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-28947

Improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-28947

CVE-2024-28947 relates to Intel® Server Board S2600ST Family firmware prior to 02.01.0017, where improper input validation in the kernel-mode driver can allow a locally privileged user to escalate privileges. Affected product is Intel Server Board S2600ST Family firmware; root cause is input vali...

PT-2024-6132 · Intel +1 · Intel Server Board S2600Cw Family +1

Name of the Vulnerable Software and Affected Versions: IntelR Server Board S2600ST Family versions prior to 02.01.0017 Description: The issue exists due to improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware. This may allow a privileged user to...

Intel® Server Board S2600ST Family Firmware Advisory 

Summary: A potential security vulnerability in some Intel® Server Board S2600ST Family firmware may allow escalation of privilege. Intel is releasing software pdates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28947 Description: Improper input validation in...

OpenBMC Firmware Advisory

Summary: Potential security vulnerabilities in OpenBMC Firmware for some Intel® Server Platforms may allow information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-35123 Description: Uncaug...

CVE-2024-23980

Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some IntelR Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-23487

Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-24981

Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some IntelR Server M50FCP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-22382

Improper input validation in PprRequestLog module in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-22095

Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42668

CVE-2023-42668 describes an “Incorrect default permissions” issue in onboard video driver software for Intel® Server Boards based on the Intel® 62X chipset, before version 1.14, potentially allowing an authenticated user to escalate privileges via local access. The CVSSv3.1 vector is AV:L/AC:H/PR...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-42668

Incorrect default permissions in some onboard video driver software before version 1.14 for IntelR Server Boards based on IntelR 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22662

Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some IntelR Server Board S2600BP products may allow a privileged user to potentially enable denial of service via local access...