deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-48986
Published: 2024-02-14
Description: Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.lmgsecurity.com/news/critical-software-vulnerabilities-impacting-credit-unions-discovered-by-lmg-security-researcher-immediate-action-recommended/; https://www.lmgsecurity.com/news/critical-software-vulnerabilities-impacting-credit-unions-discovered-by-lmg-security-researcher-immediate-action-recommended/
CVE: CVE-2023-48987
Published: 2024-02-14
Description: Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.lmgsecurity.com/news/critical-software-vulnerabilities-impacting-credit-unions-discovered-by-lmg-security-researcher-immediate-action-recommended/; https://www.lmgsecurity.com/news/critical-software-vulnerabilities-impacting-credit-unions-discovered-by-lmg-security-researcher-immediate-action-recommended/
CVE: CVE-2024-23783
Published: 2024-02-14
Description: Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to access the affected product without authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23784
Published: 2024-02-14
Description: Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent unauthenticated attacker to obtain a username and its hashed password displayed on the management page of the affected product.
CVSS Score: 6.5 (MEDIUM)
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23785
Published: 2024-02-14
Description: Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to change the product settings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23786
Published: 2024-02-14
Description: Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23787
Published: 2024-02-14
Description: Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to obtain an arbitrary file in the affected product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23788
Published: 2024-02-14
Description: Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-918
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23789
Published: 2024-02-14
Description: Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on the affected product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jp.sharp/support/taiyo/info/JVNVU94591337_en.pdf; https://jp.sharp/support/taiyo/info/JVNVU94591337_jp.pdf; https://jvn.jp/en/vu/JVNVU94591337/
CVE: CVE-2024-23952
Published: 2024-02-14
Description: This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset.
 
Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.  
This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2024/02/14/2; http://www.openwall.com/lists/oss-security/2024/02/14/3; https://lists.apache.org/thread/zc58zvm4414molqn2m4d4vkrbrsxdksx
CVE: CVE-2023-22293
Published: 2024-02-14
Description: Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-22311
Published: 2024-02-14
Description: Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
CVE: CVE-2023-22342
Published: 2024-02-14
Description: Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-22390
Published: 2024-02-14
Description: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-22848
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-24463
Published: 2024-02-14
Description: Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-24481
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-24542
Published: 2024-02-14
Description: Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428, CWE-428, CWE-428
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-24589
Published: 2024-02-14
Description: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-24591
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00973.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00973.html
CVE: CVE-2023-25073
Published: 2024-02-14
Description: Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html
CVE: CVE-2023-25174
Published: 2024-02-14
Description: Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00928.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00928.html
CVE: CVE-2023-25769
Published: 2024-02-14
Description: Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-25777
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-25779
Published: 2024-02-14
Description: Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-25945
Published: 2024-02-14
Description: Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00927.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00927.html
CVE: CVE-2023-25951
Published: 2024-02-14
Description: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-26585
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-26586
Published: 2024-02-14
Description: Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-248
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-26591
Published: 2024-02-14
Description: Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denial of service via physical access.
CVSS Score: 2.0 (LOW)
CWE: CWE-252, CWE-252
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-26592
Published: 2024-02-14
Description: Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-502, CWE-502
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-26596
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 2.5 (LOW)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-27300
Published: 2024-02-14
Description: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-27301
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-27303
Published: 2024-02-14
Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-27307
Published: 2024-02-14
Description: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-27308
Published: 2024-02-14
Description: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE: CVE-2023-27517
Published: 2024-02-14
Description: Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
CVE: CVE-2023-28374
Published: 2024-02-14
Description: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-28396
Published: 2024-02-14
Description: Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable denial of service via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00895.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00895.html
CVE: CVE-2023-28407
Published: 2024-02-14
Description: Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html
CVE: CVE-2023-28715
Published: 2024-02-14
Description: Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00956.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00956.html
CVE: CVE-2023-28720
Published: 2024-02-14
Description: Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access..
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE: CVE-2023-28739
Published: 2024-02-14
Description: Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00928.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00928.html
CVE: CVE-2023-28745
Published: 2024-02-14
Description: Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00974.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00974.html
CVE: CVE-2023-29153
Published: 2024-02-14
Description: Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01003.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-29162
Published: 2024-02-14
Description: Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access.


CVSS Score: 6.0 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html
CVE: CVE-2023-30767
Published: 2024-02-14
Description: Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-92, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00903.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00903.html
CVE: CVE-2023-31189
Published: 2024-02-14
Description: Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html