CVE-2023-29164
- State
- Published
- Severity
- 5.8 Medium
- Published
- Feb 12, 2025
- Updated
- Feb 13, 2025
- Reserved
- Jun 9, 2023
Description
Improper access control in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, before version 02.01.0017 and Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable escalation of privilege via local access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.8 Medium | CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N | intel |
| 3.1 | 7.3 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N | intel |
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNPn/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.