PT-2023-12971 · Intel · Integrated Bmc

Published 2023-02-16 · Updated 2023-03-13 · CVE-2022-29493

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Integrated BMC versions prior to 2.86 Integrated BMC versions prior to 2.09 Integrated BMC versions prior to 2.78

Description The issue is related to an uncaught exception in the webserver for the Integrated BMC in some Intel(R) platforms, which may allow a privileged user to potentially enable denial of service via network access.

Recommendations For versions prior to 2.86, update to version 2.86 or later to resolve the issue. For versions prior to 2.09, update to version 2.09 or later to resolve the issue. For versions prior to 2.78, update to version 2.78 or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-29493

Affected Products

Integrated Bmc

References · 4

• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29493 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29493 · Security Note
• https://t.me/cibsecurity/58400 · Telegram Post