CVE-2023-34431

Published: Nov 14, 2023Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access

Affected (33)

Intel

33 products

Server Board M70klp2sb Firmware

Server System M70klp4s2uhh Firmware

Server Board M20ntp2sb Firmware

Server System M20ntp1ur304 Firmware

Server Board M10jnp2sb Firmware

Server Board S2600bpbr Firmware

Server Board S2600bps Firmware

Server Board S2600bpsr Firmware

Server Board S2600bpqr Firmware

Server Board S2600bpb Firmware

Server Board S2600bpq Firmware

Compute Module Hns2600bpblcr Firmware

Compute Module Hns2600bpblc Firmware

Compute Module Hns2600bpblc24r Firmware

Compute Module Hns2600bps Firmware

Compute Module Hns2600bps24 Firmware

Compute Module Hns2600bpbr Firmware

Compute Module Hns2600bpqr Firmware

Compute Module Hns2600bpsr Firmware

Compute Module Hns2600bps24r Firmware

Compute Module Hns2600bpq24r Firmware

Compute Module Hns2600bpb24 Firmware

Compute Module Hns2600bpb Firmware

Compute Module Hns2600bpblc24 Firmware

Compute Module Hns2600bpq Firmware

Compute Module Hns2600bpq24 Firmware

Compute Module Liquid Cooled Hns2600bpbrct Firmware

Server System Vrn2224bpaf6 Firmware

Server System Vrn2224bphy6 Firmware

Server System Mcb2208wfaf5 Firmware

Server System Zsb2224bpaf2 Firmware

Server System Zsb2224bphy1 Firmware

Server System Zsb2224bpaf1 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board M70klp2sb Firmware	Before 01.04.0022

Running on/with	Platform Versions
Intel Server Board M70klp2sb	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System M70klp4s2uhh Firmware	Before 01.04.0022

Running on/with	Platform Versions
Intel Server System M70klp4s2uhh	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board M20ntp2sb Firmware	Before 0022.d02

Running on/with	Platform Versions
Intel Server Board M20ntp2sb	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System M20ntp1ur304 Firmware	Before 0022.d02

Running on/with	Platform Versions
Intel Server System M20ntp1ur304	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board M10jnp2sb Firmware	Before 7.219

Running on/with	Platform Versions
Intel Server Board M10jnp2sb	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bpbr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server Board S2600bpbr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bps Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server Board S2600bps	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bpsr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server Board S2600bpsr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bpqr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server Board S2600bpqr	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bpb Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server Board S2600bpb	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bpq Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server Board S2600bpq	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpblcr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpblcr	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpblc Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpblc	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpblc24r Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpblc24r	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bps Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bps	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bps24 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bps24	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpbr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpbr	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpqr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpqr	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpsr Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpsr	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bps24r Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bps24r	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpq24r Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpq24r	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpb24 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpb24	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpb Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpb	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpblc24 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpblc24	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpq Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpq	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Hns2600bpq24 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Hns2600bpq24	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Compute Module Liquid Cooled Hns2600bpbrct Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Compute Module Liquid Cooled Hns2600bpbrct	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System Vrn2224bpaf6 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server System Vrn2224bpaf6	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System Vrn2224bphy6 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server System Vrn2224bphy6	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System Mcb2208wfaf5 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server System Mcb2208wfaf5	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System Zsb2224bpaf2 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server System Zsb2224bpaf2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System Zsb2224bphy1 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server System Zsb2224bphy1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System Zsb2224bpaf1 Firmware	Before 02.01.0015

Running on/with	Platform Versions
Intel Server System Zsb2224bpaf1	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.