Buffer Restriction Flaw in Intel Server Board BMC Firmware
CVE-2023-25545

8.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Server Board Bmc Firmware
Vendor
CVE Published:
10 May 2023

What is CVE-2023-25545?

A vulnerability exists in the Intel Server Board Baseboard Management Controller (BMC) firmware prior to version 2.90, where improper buffer restrictions may permit a local user with privileged access to escalate their privileges. This flaw poses significant risks, allowing unauthorized changes and potentially compromising system integrity. Users are encouraged to update to the latest firmware version to mitigate this security risk.

Affected Version(s)

Intel(R) Server Board BMC firmware before version 2.90

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.