Vulnerability Intelligence Report
CVE-2023-32280
Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access.
No Active Exploit Signals
CVSS Base Score
5.3
MEDIUM
Exploitability:3.9
Impact Score:1.5
EPSS Probability:0.48%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-522 ↗Insufficiently protected credentials
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| intel | openbmc | all |
| intel | xeon_bronze_3408u | all |
| intel | xeon_gold_5403n | all |
| intel | xeon_gold_5411n | all |
| intel | xeon_gold_5412u | all |
| intel | xeon_gold_5415\+ | all |
| intel | xeon_gold_5416s | all |
| intel | xeon_gold_5418n | all |
| intel | xeon_gold_5418y | all |
| intel | xeon_gold_5420\+ | all |
| intel | xeon_gold_5423n | all |
| intel | xeon_gold_5433n | all |
| intel | xeon_gold_6403n | all |
| intel | xeon_gold_6414u | all |
| intel | xeon_gold_6416h | all |
| intel | xeon_gold_6418h | all |
| intel | xeon_gold_6421n | all |
| intel | xeon_gold_6423n | all |
| intel | xeon_gold_6426y | all |
| intel | xeon_gold_6428n | all |
| intel | xeon_gold_6430 | all |
| intel | xeon_gold_6433n | all |
| intel | xeon_gold_6433ne | all |
| intel | xeon_gold_6434 | all |
| intel | xeon_gold_6434h | all |
| intel | xeon_gold_6438m | all |
| intel | xeon_gold_6438n | all |
| intel | xeon_gold_6438y\+ | all |
| intel | xeon_gold_6442y | all |
| intel | xeon_gold_6443n | all |
| intel | xeon_gold_6444y | all |
| intel | xeon_gold_6448h | all |
| intel | xeon_gold_6448y | all |
| intel | xeon_gold_6454s | all |
| intel | xeon_gold_6458q | all |
| intel | xeon_platinum_8444h | all |
| intel | xeon_platinum_8450h | all |
| intel | xeon_platinum_8452y | all |
| intel | xeon_platinum_8454h | all |
| intel | xeon_platinum_8458p | all |
| intel | xeon_platinum_8460h | all |
| intel | xeon_platinum_8460y\+ | all |
| intel | xeon_platinum_8461v | all |
| intel | xeon_platinum_8462y\+ | all |
| intel | xeon_platinum_8468 | all |
| intel | xeon_platinum_8468h | all |
| intel | xeon_platinum_8468v | all |
| intel | xeon_platinum_8470 | all |
| intel | xeon_platinum_8470n | all |
| intel | xeon_platinum_8471n | all |
| intel | xeon_platinum_8480\+ | all |
| intel | xeon_platinum_8490h | all |
| intel | xeon_silver_4410t | all |
| intel | xeon_silver_4410y | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.484%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Intel Corporation · Vendor · USA |
| Reserved | 2023-06-09T03:00:03 |
| Published | 2024-02-14T13:37:51 |
| Last Updated | 2024-08-14T17:50:42 |
Community Chatter & Buzz