Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP

CVE-2023-29164
MEDIUM 5.8

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
intel
NVD status
Deferred

Search on…

Description

Improper access control in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, before version 02.01.0017 and Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable escalation of privilege via local access.

Weaknesses (CWE)

  • CWE-284 — Improper Access Control

References

Scores

VersionScoreVectorScored by
CVSS 4.0MEDIUM 5.8CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:Nintel
CVSS 3.1HIGH 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:Nintel
CVSS 4.0MEDIUM 5.8CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · secure@intel.com (Secondary)
CVSS 3.1HIGH 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:NNVD · secure@intel.com (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNPaffected See references

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD