Skip to content
OpenAdvisories
Medium WID-SEC-2025-1031 11 CVEs

Intel Server Board D50DNP und M50FCP: Mehrere Schwachstellen

Published May 13, 2025 · Updated May 15, 2025 · Revision 2 · de-DE

Vendor: Intel Product: Firmware

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in der Intel Server Board D50DNP und M50FCP Firmware ausnutzen, um seine Privilegien zu erhöhen und vertrauliche Informationen preiszugeben.

Product

Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.

Vulnerabilities 11

  • High 7.5
    CVE-2024-21829

    Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to po…

  • High 7.5
    CVE-2024-31155

    Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potential…

  • High 7.5
    CVE-2025-20082

    Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50…

  • High 7.5
    CVE-2025-21094

    Improper input validation in the UEFI firmware DXE module for the Intel(R) Server D50DNP and M50FCP boards may allow a …

  • High 7.5
    CVE-2025-24308

    Improper input validation in the UEFI firmware error handler for the Intel(R) Server D50DNP and M50FCP may allow a priv…

  • Medium 5.3
    CVE-2024-21859

    Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potential…

  • Medium 5.3
    CVE-2024-28047

    Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enab…

    intel-microcode Debian
  • Medium 5.3
    CVE-2024-31157

    Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to…

    intel-microcode Debian
  • Medium 5.3
    CVE-2025-20034

    Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M…

  • Medium 4.1
    CVE-2025-20009

    Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards …

  • Medium 4.1
    CVE-2025-21100

    Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged us…

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-14555, EUVD-2025-14522, EUVD-2025-14552

  2. #1

    Initiale Fassung

References