ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-25545

—
CVSS 3.1
6.7 medium
EPSS
<1%p10
Published
()
Modified
Description

Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

Vendors
intel
Products
server system d50tnp1mhcrlc firmware, server system d50tnp1mhcpac firmware, server system d50tnp2mhsvac firmware, server system d50tnp2mhstac firmware, server system d50tnp1mhcrac firmware, server system d50tnp2mfalac firmware, server system m50cyp1ur204 firmware, server system m50cyp1ur212 firmware, server system m50cyp2ur312 firmware, server system m50cyp2ur208 firmware
Weakness
CWE-92, CWE-119
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.