Server System D50Tnp1Mhcrlc Firmware
CVE-2023-24475
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.
AnalysisAI
Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.
Technical ContextAI
This vulnerability is classified as Out-of-bounds Read (CWE-125), which allows attackers to read data from memory outside the intended buffer boundaries. Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. Affected products include: Intel Server System D50Tnp1Mhcrlc Firmware, Intel Server System D50Tnp1Mhcpac Firmware, Intel Server System D50Tnp2Mhsvac Firmware, Intel Server System D50Tnp2Mhstac Firmware, Intel Server System D50Tnp1Mhcrac Firmware. Version information: version 2.90.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Validate array indices and buffer lengths. Use memory-safe languages. Enable AddressSanitizer during testing.
Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable esc
Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a
Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable
Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user
Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable informa
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to
Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable de
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today