Information Disclosure Vulnerability in Intel Server Board BMC Firmware

CVE-2023-28411

What is CVE-2023-28411?

A double free vulnerability exists in certain versions of Intel Server Board BMC firmware, specifically before version 2.90. This flaw may enable a privileged user to gain unauthorized access to sensitive information upon local access. The improper handling of memory allocations can lead to scenarios where attackers can exploit this vulnerability for data exposure, thus potentially compromising system integrity and confidentiality.

References