CVSS: 6.7EPSS: 0%CPEs: 20EXPL: 0CVE-2023-22379
https://notcve.org/view.php?id=CVE-2023-22379
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html • CWE-20: Improper Input Validation •
CVSS: 7.9EPSS: 0%CPEs: 20EXPL: 0CVE-2023-22442
https://notcve.org/view.php?id=CVE-2023-22442
Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html • CWE-787: Out-of-bounds Write •
CVSS: 8.2EPSS: 0%CPEs: 20EXPL: 0CVE-2023-25545
https://notcve.org/view.php?id=CVE-2023-25545
Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html • CWE-92: DEPRECATED: Improper Sanitization of Custom Special Characters CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.2EPSS: 0%CPEs: 20EXPL: 0CVE-2023-22297
https://notcve.org/view.php?id=CVE-2023-22297
Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-788: Access of Memory Location After End of Buffer •
CVSS: 8.2EPSS: 0%CPEs: 20EXPL: 0CVE-2023-22661
https://notcve.org/view.php?id=CVE-2023-22661
Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •