CVE-2023-25545 — DEPRECATED: Improper Sanitization of Custom Special Characters in Intel Server System D50tnp1mhcpac Firmware

CWE-92 — DEPRECATED: Improper Sanitization of Custom Special Characters CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources

Severity

6.7MEDIUMNVD

CNA8.2

EPSS

0.1%

top 71.76%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Server System D50tnp1mhcpac Firmware Intel Server System D50tnp1mhcrac Firmware Intel Server System D50tnp1mhcrlc Firmware +7 more

Timeline

PublishedMay 10

Description

Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages10 packages

▶NVDintel/server_system_m50cyp1ur204_firmware< 2.90

▶NVDintel/server_system_m50cyp1ur212_firmware< 2.90

▶NVDintel/server_system_m50cyp2ur208_firmware< 2.90

▶NVDintel/server_system_m50cyp2ur312_firmware< 2.90

▶NVDintel/server_system_d50tnp1mhcpac_firmware< 2.90

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-8h7h-x463-h454: Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2↗2023-05-10

▶

CVEList

CVE-2023-25545: Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2↗2023-05-10

▶