Skip to content
OpenAdvisories
High WID-SEC-2023-0376 5 CVEs

Intel Chipset: Mehrere Schwachstellen

Published Feb 14, 2023 · Updated Feb 14, 2023 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Intel Chipset ausnutzen, um einen Denial of Service Angriff durchzuführen und seine Privilegien zu erweitern.

Product

Intel stellt Chipsätze her, die auf Mainboards zur Ansteuerung der Intel Prozessoren eingesetzt werden.

Vulnerabilities 5

  • High 7.5

    In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI …

  • High 7.5

    Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated use…

  • Medium 6.5

    Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45…

  • Medium 4.5

    Uncaught exception in webserver for the Integrated BMC in some Intel(R) platforms before versions 2.86, 2.09 and 2.78 m…

  • Unscored —

    In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

Revision history

  1. #1

    Initiale Fassung

References