CVE-2023-22297: Intel Server System d50tnp1mhcpac Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access.

Affected products

• Intel Server System d50tnp1mhcpac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp1mhcrac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp1mhcrlc Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp2mfalac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp2mhstac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp2mhsvac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp1ur204 Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp1ur212 Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp2ur208 Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp2ur312 Firmware: before 2.90 (fixed in 2.90)

Published 2023-05-10. Last modified 2026-06-17.