Thierry Fernandes Faria

**Name of the Vulnerable Software and Affected Versions** Intel(R) Server Board S2600WF versions prior to 02.01.0017 Intel(R) Server Board S2600ST versions prior to 02.01.0017 Intel(R) Server Board S2600BP versions prior to 02.01.0017 Intel(R) Server Board M50CYP versions prior to R01.01.0009 Intel(R) Server Board D50TNP versions prior to R01.01.0009 **Description** A heap-based buffer overflow in the BMC Firmware may allow a privileged user to enable escalation of privilege via local access. **Recommendations** For Intel(R) Server Board S2600WF versions prior to 02.01.0017, update to version 02.01.0017 or later. For Intel(R) Server Board S2600ST versions prior to 02.01.0017, update to version 02.01.0017 or later. For Intel(R) Server Board S2600BP versions prior to 02.01.0017, update to version 02.01.0017 or later. For Intel(R) Server Board M50CYP versions prior to R01.01.0009, update to version R01.01.0009 or later. For Intel(R) Server Board D50TNP versions prior to R01.01.0009, update to version R01.01.0009 or later.

**Name of the Vulnerable Software and Affected Versions** OpenBMC Firmware versions prior to egs-1.15-0 OpenBMC Firmware versions prior to bhs-0.27 **Description** The issue is an out of bounds read that may allow a privileged user to potentially enable information disclosure via local access. **Recommendations** For versions prior to egs-1.15-0, update to version egs-1.15-0 or later. For versions prior to bhs-0.27, update to version bhs-0.27 or later.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Server Board BMC firmware versions prior to 2.90 **Description** The issue allows a privileged user to enable escalation of privilege via local access due to access of memory location after end of buffer in the firmware. **Recommendations** For versions prior to 2.90, update to version 2.90 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Server Board BMC firmware versions prior to 2.90 **Description** The issue is related to improper input validation in the firmware, which may allow a privileged user to enable information disclosure via local access. **Recommendations** For versions prior to 2.90, update to version 2.90 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Farol (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `email` parameter to "tkmonitor/estrutura/login/Login.actions.php" API endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.