PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Falcon Corruption · Published 2023-08-08 · Updated 2023-08-23 · CVE-2023-34355

Positive Technologies · (AI Summary)

CVSS v3.1

6.7

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows

Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux

Description:

The issue is related to an uncontrolled search path element in the BMC video driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit a malicious user to execute arbitrary code.

Recommendations:

For Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows, update to version 3.0 or later.

For Intel(R) Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux, update to version 1.13.4 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2023-04756

CVE-2023-34355

Affected Products

Intel Server Board M10Jnp2Sb Bmc Video Driver

References · 8

• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00899.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34355 · Security Note
• https://bdu.fstec.ru/vul/2023-04756 · Security Note
• https://intel.com/content/www/us/en/download/19467/integrated-bmc-video-driver-for-server-systems-based-on-the-intel-server-board-m10jnp2sb.html · Note
• https://t.me/cibsecurity/68319 · Telegram Post
• https://vuldb.com/?id.236842 · Note
• https://twitter.com/CVEnew/status/1690556816369836032 · Twitter Post
• https://intel.com/content/www/us/en/download/19578/integrated-bmc-video-driver-linux-for-server-systems-based-on-the-intel-server-board-m10jnp2sb.html · Note