CVE-2023-31189: Intel Openbmc

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.

Affected products

• Intel Openbmc: before egs-1.09 (fixed in egs-1.09)

Published 2024-02-14. Last modified 2026-06-17.