CVE-2023-22297
10.05.2023, 14:15
Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| intel | server_system_d50tnp1mhcrlc_firmware | 𝑥 < 2.90 |
| intel | server_system_d50tnp1mhcpac_firmware | 𝑥 < 2.90 |
| intel | server_system_d50tnp2mhsvac_firmware | 𝑥 < 2.90 |
| intel | server_system_d50tnp2mhstac_firmware | 𝑥 < 2.90 |
| intel | server_system_d50tnp1mhcrac_firmware | 𝑥 < 2.90 |
| intel | server_system_d50tnp2mfalac_firmware | 𝑥 < 2.90 |
| intel | server_system_m50cyp1ur204_firmware | 𝑥 < 2.90 |
| intel | server_system_m50cyp1ur212_firmware | 𝑥 < 2.90 |
| intel | server_system_m50cyp2ur312_firmware | 𝑥 < 2.90 |
| intel | server_system_m50cyp2ur208_firmware | 𝑥 < 2.90 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-788 - Access of Memory Location After End of BufferThe software reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.