CVE-2023-34355

Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:intel:integrated_bmc_video_driver:*:*:*:*:*:linux:*:*
cpe:2.3:a:intel:integrated_bmc_video_driver:*:*:*:*:*:windows:*:*
cpe:2.3:h:intel:server_board_m10jnp2sb:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:07

Type Values Removed Values Added
References () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html - Patch, Vendor Advisory () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 7.3
v2 : unknown
v3 : 6.7

23 Aug 2023, 13:43

Type Values Removed Values Added
CPE cpe:2.3:h:intel:server_board_m10jnp2sb:-:*:*:*:*:*:*:*
cpe:2.3:a:intel:integrated_bmc_video_driver:*:*:*:*:*:windows:*:*
cpe:2.3:a:intel:integrated_bmc_video_driver:*:*:*:*:*:linux:*:*
CWE CWE-427
References (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html - (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html - Patch, Vendor Advisory
First Time Intel
Intel integrated Bmc Video Driver
Intel server Board M10jnp2sb
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.3

11 Aug 2023, 03:44

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-11 03:15

Updated : 2024-11-21 08:07


NVD link : CVE-2023-34355

Mitre link : CVE-2023-34355

CVE.ORG link : CVE-2023-34355


JSON object : View

Products Affected

intel

  • server_board_m10jnp2sb
  • integrated_bmc_video_driver
CWE
CWE-427

Uncontrolled Search Path Element