PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Falcon Corruption · Publicado 2023-08-08 · Atualizado 2023-08-23 · CVE-2023-34355

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux

Description The issue is related to an uncontrolled search path element in the BMC video driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit a malicious user to execute arbitrary code.

Recommendations For Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows, update to version 3.0 or later. For Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux, update to version 1.13.4 or later.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

BDU:2023-04756

CVE-2023-34355

Produtos afetados

Intel Server Board M10Jnp2Sb Bmc Video Driver

Referências · 9

• https://bdu.fstec.ru/vul/2023-04756 · Nota de Segurança
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html · Aviso do Fabricante
• https://vuldb.com/?id.236842 · Nota
• https://twitter.com/CVEnew/status/1690556816369836032 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-34355 · Aviso do Fabricante
• https://t.me/cibsecurity/68319 · Publicação no Telegram
• https://intel.com/content/www/us/en/download/19467/integrated-bmc-video-driver-for-server-systems-based-on-the-intel-server-board-m10jnp2sb.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-34355 · Nota de Segurança
• https://intel.com/content/www/us/en/download/19578/integrated-bmc-video-driver-linux-for-server-systems-based-on-the-intel-server-board-m10jnp2sb.html · Nota