Main Vulnerability Database Vulnerabilities #VU76711

#VU76711 Access of Memory Location After End of Buffer in Intel Server Board Baseboard Management Controller (BMC) - CVE-2023-22297

Published: May 31, 2023

Vulnerability identifier: #VU76711

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-22297

CWE-ID: CWE-788

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Intel Server Board Baseboard Management Controller (BMC)

Software vendor:
Intel

Description

The vulnerability allows a local administrator to escalate privileges on the system.

The vulnerability exists due to access of memory location after end of buffer, which leads to security restrictions bypass and privilege escalation.

Install updates from vendor's website.