High severity8.2NVD Advisory· Published May 10, 2023· Updated Jun 17, 2026
CVE-2023-25545
CVE-2023-25545
Description
Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.
Affected products
12- cpe:2.3:o:intel:server_system_d50tnp1mhcrlc_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_d50tnp1mhcpac_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_d50tnp2mhsvac_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_d50tnp2mhstac_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_d50tnp1mhcrac_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_d50tnp2mfalac_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_m50cyp1ur204_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_m50cyp1ur212_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_m50cyp2ur312_firmware:*:*:*:*:*:*:*:*Range: <2.90
- cpe:2.3:o:intel:server_system_m50cyp2ur208_firmware:*:*:*:*:*:*:*:*Range: <2.90
- Intel/Server Board BMC firmwaredescription
- Range: <2.90
Patches
Vulnerability mechanics
References
1- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.htmlnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.