CVEvulnerability

CVE-2023-34431

6.7 MEDIUM Published 2023-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access

Affected configurations

• intel server board m70klp2sb firmware (< 01.04.0022) • intel server system m70klp4s2uhh firmware (< 01.04.0022) • intel server board m20ntp2sb firmware (< 0022.d02) • intel server system m20ntp1ur304 firmware (< 0022.d02) • intel server board m10jnp2sb firmware (< 7.219) • intel server board s2600bpbr firmware (< 02.01.0015) • intel server board s2600bps firmware (< 02.01.0015) • intel server board s2600bpsr firmware (< 02.01.0015) • intel server board s2600bpqr firmware (< 02.01.0015) • intel server board s2600bpb firmware (< 02.01.0015) • intel server board s2600bpq firmware (< 02.01.0015) • intel compute module hns2600bpblcr firmware (< 02.01.0015) • intel compute module hns2600bpblc firmware (< 02.01.0015) • intel compute module hns2600bpblc24r firmware (< 02.01.0015) • intel compute module hns2600bps firmware (< 02.01.0015) • intel compute module hns2600bps24 firmware (< 02.01.0015) • intel compute module hns2600bpbr firmware (< 02.01.0015) • intel compute module hns2600bpqr firmware (< 02.01.0015) • intel compute module hns2600bpsr firmware (< 02.01.0015) • intel compute module hns2600bps24r firmware (< 02.01.0015) • intel compute module hns2600bpq24r firmware (< 02.01.0015) • intel compute module hns2600bpb24 firmware (< 02.01.0015) • intel compute module hns2600bpb firmware (< 02.01.0015) • intel compute module hns2600bpblc24 firmware (< 02.01.0015) • intel compute module hns2600bpq firmware (< 02.01.0015) • intel compute module hns2600bpq24 firmware (< 02.01.0015) • intel compute module liquid-cooled hns2600bpbrct firmware (< 02.01.0015) • intel server system vrn2224bpaf6 firmware (< 02.01.0015) • intel server system vrn2224bphy6 firmware (< 02.01.0015) • intel server system mcb2208wfaf5 firmware (< 02.01.0015) • intel server system zsb2224bpaf2 firmware (< 02.01.0015) • intel server system zsb2224bphy1 firmware (< 02.01.0015) • intel server system zsb2224bpaf1 firmware (< 02.01.0015)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References