CVE Feed

    Dashboard / CVE / CVE-2023-22442

    CVE-2023-22442

    Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

    Published:May 10, 2023
    Last Modified:Jan 27, 2025
    EPS:May 10, 2023
    EPSS Score:0.00055
    CVSS Score:7.9

    Affected Products

    Vendor
    Intel
    Product
    Server System D50tnp1mhcpac
    Vendor
    Intel
    Product
    Server System D50tnp1mhcpac Firmware
    Vendor
    Intel
    Product
    Server System D50tnp1mhcrac
    Vendor
    Intel
    Product
    Server System D50tnp1mhcrac Firmware
    Vendor
    Intel
    Product
    Server System D50tnp1mhcrlc
    Vendor
    Intel
    Product
    Server System D50tnp1mhcrlc Firmware
    Vendor
    Intel
    Product
    Server System D50tnp2mfalac
    Vendor
    Intel
    Product
    Server System D50tnp2mfalac Firmware
    Vendor
    Intel
    Product
    Server System D50tnp2mhstac
    Vendor
    Intel
    Product
    Server System D50tnp2mhstac Firmware
    Vendor
    Intel
    Product
    Server System D50tnp2mhsvac
    Vendor
    Intel
    Product
    Server System D50tnp2mhsvac Firmware
    Vendor
    Intel
    Product
    Server System M50cyp1ur204
    Vendor
    Intel
    Product
    Server System M50cyp1ur204 Firmware
    Vendor
    Intel
    Product
    Server System M50cyp1ur212
    Vendor
    Intel
    Product
    Server System M50cyp1ur212 Firmware
    Vendor
    Intel
    Product
    Server System M50cyp2ur208
    Vendor
    Intel
    Product
    Server System M50cyp2ur208 Firmware
    Vendor
    Intel
    Product
    Server System M50cyp2ur312
    Vendor
    Intel
    Product
    Server System M50cyp2ur312 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-22443 (CVSS 6) — Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to…
    CVE-2023-24475 (CVSS 6) — Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user …
    CVE-2023-25175 (CVSS 6.1) — Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privilege…
    CVE-2023-28411 (CVSS 6.3) — Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enab…
    CVE-2023-25776 (CVSS 6.3) — Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privilege…
    CVE-2023-22379 (CVSS 6.7) — Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privilege…
    CVE-2023-25545 (CVSS 8.2) — Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privil…
    CVE-2023-22297 (CVSS 8.2) — Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 m…
    CVE-2023-22661 (CVSS 8.2) — Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High