Intel BIOS Guard und PPAM Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Summary

Product

Vulnerabilities 3

• High 7.2
  CVE-2023-27504

  Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escala…

  May 16, 2024
• High 7.2
  CVE-2023-28402

  Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escala…

  May 16, 2024
• Medium 6.1
  CVE-2023-28383

  Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalat…

  May 16, 2024

Revision history

1. 2024-05-15 #2

   Neue Updates von HP aufgenommen

2. 2024-05-14 #1

   Initiale Fassung

References

• Intel Security Advisory INTEL-SA-00814 vom 2024-05-14
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html
• Dell Security Advisory DSA-2024-199 vom 2024-05-14
  https://www.dell.com/support/kbdoc/de-de/000225023/dsa-2024-199-security-update-for-dell-poweredge-t30-t40-mini-tower-server-for-intel-bios-guard-and-ppam-firmware-vulnerabilities
• Dell Security Advisory DSA-2023-449 vom 2024-05-14
  https://www.dell.com/support/kbdoc/de-de/000219969/dsa-2023-449
• Lenovo Security Advisory LEN-158632 vom 2024-05-15
  https://support.lenovo.com/us/en/product_security/LEN-158632
• HP Security Bulletin HPSBHF03936 vom 2024-05-08
  https://support.hp.com/us-en/document/ish_10564285-10564378-16/HPSBHF03936