CVE-2023-31189: High severity Intel OpenBMC firmware vulnerability
Published Feb 14, 2024
·Updated
Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.
Affected Software
55 affected components
Intel OpenBMC firmware<eg-1.09
All of the following
Intel OpenBMC<egs-1.09
Any of the following
Intel Xeon Bronze 3408u
Intel Xeon Gold 5403n
Intel Xeon Gold 5411n
Intel Xeon Gold 5412u
Intel Xeon Gold 5415\+
Intel Xeon Gold 5416s
Intel Xeon Gold 5418n
Intel Xeon Gold 5418y
Intel Xeon Gold 5420\+
Intel Xeon Gold 5423n
Intel Xeon Gold 5433n
Intel Xeon Gold 6403n
Intel Xeon Gold 6414u
Intel Xeon Gold 6416h
Intel Xeon Gold 6418h
Intel Xeon Gold 6421n
Intel Xeon Gold 6423n
Intel Xeon Gold 6426y
Intel Xeon Gold 6428n
Intel Xeon Gold 6430
Intel Xeon Gold 6433n
Intel Xeon Gold 6433ne
Intel Xeon Gold 6434
Intel Xeon Gold 6434h
Intel Xeon Gold 6438m
Intel Xeon Gold 6438n
Intel Xeon Gold 6438y\+
Intel Xeon Gold 6442y
Intel Xeon Gold 6443n
Intel Xeon Gold 6444y
Intel Xeon Gold 6448h
Intel Xeon Gold 6448y
Intel Xeon Gold 6454s
Intel Xeon Gold 6458q
Intel Xeon Platinum 8444h
Intel Xeon Platinum 8450h
Intel Xeon Platinum 8452y
Intel Xeon Platinum 8454h
Intel Xeon Platinum 8458p
Intel Xeon Platinum 8460h
Intel Xeon Platinum 8460y\+
Intel Xeon Platinum 8461v
Intel Xeon Platinum 8462y\+
Intel Xeon Platinum 8468
Intel Xeon Platinum 8468h
Intel Xeon Platinum 8468v
Intel Xeon Platinum 8470
Intel Xeon Platinum 8470n
Intel Xeon Platinum 8471n
Intel Xeon Platinum 8480\+
Intel Xeon Platinum 8490h
Intel Xeon Silver 4410t
Intel Xeon Silver 4410y
Event History
Feb 14, 2024
CVE Published
via MITRE·01:37 PM
Data Sourced
via MITRE·01:37 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-31189?
CVE-2023-31189 has a high severity rating due to its potential for privilege escalation through improper authentication.
2
How do I fix CVE-2023-31189?
To fix CVE-2023-31189, update the Intel OpenBMC firmware to version egs-1.09 or later.
3
Who is affected by CVE-2023-31189?
CVE-2023-31189 affects users of Intel OpenBMC firmware versions prior to egs-1.09.
4
What types of systems are impacted by CVE-2023-31189?
CVE-2023-31189 impacts Intel server products that utilize the affected OpenBMC firmware.
5
Can CVE-2023-31189 be exploited remotely?
CVE-2023-31189 requires local access for exploitation, so it cannot be exploited remotely.