Baseboard Management Controller Firmware Security Vulnerabilities - November 2019
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
9.1CVSS
8AI Score
0.002EPSS
Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.
7.8CVSS
8.1AI Score
0.0004EPSS
Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access.
9.8CVSS
8.8AI Score
0.002EPSS
Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
5.3CVSS
6.2AI Score
0.001EPSS
Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access.
7.1CVSS
7.1AI Score
0.0004EPSS
Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
5.3CVSS
6.2AI Score
0.001EPSS
Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
7.5CVSS
7.7AI Score
0.001EPSS
Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
7.5CVSS
7.7AI Score
0.001EPSS
Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.
8.1CVSS
7.8AI Score
0.001EPSS
Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.
6.5CVSS
6.7AI Score
0.001EPSS
Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
7.5CVSS
7.7AI Score
0.001EPSS
Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via network access.
7.8CVSS
8.2AI Score
0.0004EPSS
Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
7.5CVSS
7.9AI Score
0.001EPSS