Memory Access Vulnerability in Intel Server Board BMC Firmware
CVE-2023-22297

8.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Server Board Bmc Firmware
Vendor
CVE Published:
10 May 2023

What is CVE-2023-22297?

A vulnerability found in Intel Server Board BMC firmware allows for memory access beyond the allocated buffer. This issue can impact privileged users who may exploit it through local access, potentially leading to unauthorized escalation of privileges.

Affected Version(s)

Intel(R) Server Board BMC firmware before version 2.90

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.