Description
Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.
References (1)
Core 1
Core References
Patch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
Scores
CVSS v3
6.0
EPSS
0.0010
EPSS Percentile
26.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-125
Status
published
Products (10)
intel/server_system_d50tnp1mhcpac_firmware
< 2.90
intel/server_system_d50tnp1mhcrac_firmware
< 2.90
intel/server_system_d50tnp1mhcrlc_firmware
< 2.90
intel/server_system_d50tnp2mfalac_firmware
< 2.90
intel/server_system_d50tnp2mhstac_firmware
< 2.90
intel/server_system_d50tnp2mhsvac_firmware
< 2.90
intel/server_system_m50cyp1ur204_firmware
< 2.90
intel/server_system_m50cyp1ur212_firmware
< 2.90
intel/server_system_m50cyp2ur208_firmware
< 2.90
intel/server_system_m50cyp2ur312_firmware
< 2.90
Published
May 10, 2023
Tracked Since
Feb 18, 2026