NetSight
high8.2

CVE-2023-22297

Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation o…

Impact

Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelServer System D50tnp1mhcrlc Firmware
before 2.90
IntelServer System D50tnp1mhcpac Firmware
before 2.90
IntelServer System D50tnp2mhsvac Firmware
before 2.90
IntelServer System D50tnp2mhstac Firmware
before 2.90
IntelServer System D50tnp1mhcrac Firmware
before 2.90
IntelServer System D50tnp2mfalac Firmware
before 2.90
IntelServer System M50cyp1ur204 Firmware
before 2.90
IntelServer System M50cyp1ur212 Firmware
before 2.90
IntelServer System M50cyp2ur312 Firmware
before 2.90
IntelServer System M50cyp2ur208 Firmware
before 2.90

Weakness classification

References