CVE-2023-32280

Published: Feb 14, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: secure@intel.com (Secondary)

Description

Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access.

Affected (1)

Products: Intel: Openbmc

Intel

1 product

Openbmc

Configuration A

1 vulnerable · 53 platform

Vulnerable Software	Affected Versions
Intel Openbmc	Before egs-1.05

Running on/with	Platform Versions
Intel Xeon Bronze 3408u	All versions
Intel Xeon Gold 5403n	All versions
Intel Xeon Gold 5411n	All versions
Intel Xeon Gold 5412u	All versions
Intel Xeon Gold 5415+	All versions
Intel Xeon Gold 5416s	All versions
Intel Xeon Gold 5418n	All versions
Intel Xeon Gold 5418y	All versions
Intel Xeon Gold 5420+	All versions
Intel Xeon Gold 5423n	All versions
Intel Xeon Gold 5433n	All versions
Intel Xeon Gold 6403n	All versions
Intel Xeon Gold 6414u	All versions
Intel Xeon Gold 6416h	All versions
Intel Xeon Gold 6418h	All versions
Intel Xeon Gold 6421n	All versions
Intel Xeon Gold 6423n	All versions
Intel Xeon Gold 6426y	All versions
Intel Xeon Gold 6428n	All versions
Intel Xeon Gold 6430	All versions
Intel Xeon Gold 6433n	All versions
Intel Xeon Gold 6433ne	All versions
Intel Xeon Gold 6434	All versions
Intel Xeon Gold 6434h	All versions
Intel Xeon Gold 6438m	All versions
Intel Xeon Gold 6438n	All versions
Intel Xeon Gold 6438y+	All versions
Intel Xeon Gold 6442y	All versions
Intel Xeon Gold 6443n	All versions
Intel Xeon Gold 6444y	All versions
Intel Xeon Gold 6448h	All versions
Intel Xeon Gold 6448y	All versions
Intel Xeon Gold 6454s	All versions
Intel Xeon Gold 6458q	All versions
Intel Xeon Platinum 8444h	All versions
Intel Xeon Platinum 8450h	All versions
Intel Xeon Platinum 8452y	All versions
Intel Xeon Platinum 8454h	All versions
Intel Xeon Platinum 8458p	All versions
Intel Xeon Platinum 8460h	All versions
Intel Xeon Platinum 8460y+	All versions
Intel Xeon Platinum 8461v	All versions
Intel Xeon Platinum 8462y+	All versions
Intel Xeon Platinum 8468	All versions
Intel Xeon Platinum 8468h	All versions
Intel Xeon Platinum 8468v	All versions
Intel Xeon Platinum 8470	All versions
Intel Xeon Platinum 8470n	All versions
Intel Xeon Platinum 8471n	All versions
Intel Xeon Platinum 8480+	All versions
Intel Xeon Platinum 8490h	All versions
Intel Xeon Silver 4410t	All versions
Intel Xeon Silver 4410y	All versions

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.