Out of Bounds Read Vulnerability in Intel Server Board BMC Firmware
CVE-2023-24475

6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Server Board Bmc Firmware
Vendor
CVE Published:
10 May 2023

What is CVE-2023-24475?

An out of bounds read flaw in Intel Server Board BMC firmware allows a privileged user to potentially disclose sensitive information through local access. This vulnerability affects versions prior to 2.90 and can lead to unauthorized access to system data. It's crucial for users and administrators to ensure they are running the latest firmware to mitigate potential risks associated with this issue.

Affected Version(s)

Intel(R) Server Board BMC firmware before version 2.90

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.