Intel Baseboard Management Controller Firmware vulnerabilities
17 CVEs affecting Intel Baseboard Management Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29493, published 2023-02-16.
More from Intel.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2019-11171, published 2019-11-14. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service…
- CVE-2019-11168, published 2019-11-14. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via…
- CVE-2019-11182, published 2019-11-14. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
- CVE-2019-11177, published 2019-11-14. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
- CVE-2019-11180, published 2019-11-14. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
- CVE-2019-11175, published 2019-11-14. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.
- CVE-2019-11178, published 2019-11-14. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.
- CVE-2019-11174, published 2019-11-14. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
- CVE-2019-11172, published 2019-11-14. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access.
- CVE-2019-11179, published 2019-11-14. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.
Latest
- CVE-2022-29493, published 2023-02-16. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Uncaught exception in webserver for the Integrated BMC in some Intel(R) platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network…
- CVE-2020-24475, published 2021-06-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable…
- CVE-2020-24474, published 2021-06-09. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation…
- CVE-2020-24473, published 2021-06-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable…
- CVE-2019-11181, published 2019-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via network access.