Intel Openbmc vulnerabilities

3 CVEs affecting Intel Openbmc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32280, published 2024-02-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-29494, published 2023-02-16. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via…
• CVE-2023-32280, published 2024-02-14. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access.
• CVE-2023-31189, published 2024-02-14. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.