CVE-2023-24475: Intel Server System d50tnp1mhcpac Firmware

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.

Affected products

• Intel Server System d50tnp1mhcpac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp1mhcrac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp1mhcrlc Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp2mfalac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp2mhstac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System d50tnp2mhsvac Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp1ur204 Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp1ur212 Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp2ur208 Firmware: before 2.90 (fixed in 2.90)
• Intel Server System m50cyp2ur312 Firmware: before 2.90 (fixed in 2.90)

Published 2023-05-10. Last modified 2026-06-17.