PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Falcon Corruption · Published 2023-08-08 · Updated 2023-08-23 · CVE-2023-34355

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux

Description The issue is related to an uncontrolled search path element in the BMC video driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit a malicious user to execute arbitrary code.

Recommendations For Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows, update to version 3.0 or later. For Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux, update to version 1.13.4 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2023-04756

CVE-2023-34355

Affected Products

Intel Server Board M10Jnp2Sb Bmc Video Driver

References · 9

• https://bdu.fstec.ru/vul/2023-04756 · Security Note
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34355 · Security Note
• https://vuldb.com/?id.236842 · Note
• https://twitter.com/CVEnew/status/1690556816369836032 · Twitter Post
• https://t.me/cibsecurity/68319 · Telegram Post
• https://intel.com/content/www/us/en/download/19467/integrated-bmc-video-driver-for-server-systems-based-on-the-intel-server-board-m10jnp2sb.html · Note
• https://intel.com/content/www/us/en/download/19578/integrated-bmc-video-driver-linux-for-server-systems-based-on-the-intel-server-board-m10jnp2sb.html · Note