CVE-2023-31189CWE-287

Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of…

Medium · published February 14, 2024

CVSS v3.1
5.2
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-02-14T13:37Z
EPSS history
Timeline
  • 14 FEB 13:37Z
    Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of…
    cvelistv5