Description

Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Related CPE's

o

intel

baseboard_management_controller_firmware

Vulnerable

h

intel

compute_module_hns2600bpb24r

-

h

intel

compute_module_hns2600bpbr

-

h

intel

compute_module_hns2600bpq24r

-

h

intel

compute_module_hns2600bpqr

-

h

intel

compute_module_hns2600bps24r

-

h

intel

compute_module_hns2600bpsr

-

h

intel

server_board_s2600bpb

-

h

intel

server_board_s2600bpbr

-

h

intel

server_board_s2600bpq

-

h

intel

server_board_s2600bpqr

-

h

intel

server_board_s2600bps

-

h

intel

server_board_s2600bpsr

-

h

intel

server_board_s2600stb

-

h

intel

server_board_s2600stbr

-

h

intel

server_board_s2600stq

-

h

intel

server_board_s2600stqr

-

h

intel

server_board_s2600wf0

-

h

intel

server_board_s2600wf0r

-

h

intel

server_board_s2600wfq

-

h

intel

server_board_s2600wfqr

-

h

intel

server_board_s2600wft

-

h

intel

server_board_s2600wftr

-

h

intel

server_system_r1208wfqysr

-

h

intel

server_system_r1208wftys

-

h

intel

server_system_r1208wftysr

-

h

intel

server_system_r1304wf0ys

-

h

intel

server_system_r1304wf0ysr

-

h

intel

server_system_r1304wftys

-

h

intel

server_system_r1304wftysr

-

h

intel

server_system_r2208wf0zs

-

h

intel

server_system_r2208wf0zsr

-

h

intel

server_system_r2208wfqzs

-

h

intel

server_system_r2208wfqzsr

-

h

intel

server_system_r2208wftzs

-

h

intel

server_system_r2208wftzsr

-

h

intel

server_system_r2224wfqzs

-

h

intel

server_system_r2224wftzs

-

h

intel

server_system_r2224wftzsr

-

h

intel

server_system_r2308wftzs

-

h

intel

server_system_r2308wftzsr

-

h

intel

server_system_r2312wf0np

-

h

intel

server_system_r2312wf0npr

-

h

intel

server_system_r2312wfqzs

-

h

intel

server_system_r2312wftzs

-

h

intel

server_system_r2312wftzsr

-

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00476.html

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-787

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-06-09T20:15:08.050

4 years ago

Last modified

2021-07-01T19:55:23.507

4 years ago