CVE-2023-34431: Input Validation

First published: Tue Nov 14 2023(Updated: )

Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access

Credit: secure@intel.com

Affected Software	Affected Version	How to fix
All of
Intel Server Board M70klp2sb Firmware	<01.04.0022
Intel Server Board M70klp2sb
All of
Intel Server System M70klp4s2uhh
Intel Server System M70klp4s2uhh Firmware	<01.04.0022
All of
Intel Server Board M20ntp2sb
Intel Server Board M20ntp2sb Firmware	<0022.d02
All of
Intel Server System M20ntp1ur304
Intel Server System M20ntp1ur304 Firmware	<0022.d02
All of
Intel Server Board M10jnp2sb
Intel Server Board M10jnp2sb Firmware	<7.219
All of
Intel Server Board S2600bpbr
Intel Server Board S2600bpbr Firmware	<02.01.0015
All of
Intel Server Board S2600bps
Intel Server Board S2600bps Firmware	<02.01.0015
All of
Intel Server Board S2600bpsr
Intel Server Board S2600bpsr Firmware	<02.01.0015
All of
Intel Server Board S2600bpqr
Intel Server Board S2600bpqr Firmware	<02.01.0015
All of
Intel Server Board S2600bpb
Intel Server Board S2600bpb Firmware	<02.01.0015
All of
Intel Server Board S2600bpq
Intel Server Board S2600bpq Firmware	<02.01.0015
All of
Intel Compute Module Hns2600bpblcr
Intel Compute Module Hns2600bpblcr Firmware	<02.01.0015
All of
Intel Compute Module Hns2600bpblc
Intel Compute Module Hns2600bpblc Firmware	<02.01.0015
All of
Intel Compute Module Hns2600bpblc24r Firmware	<02.01.0015
Intel Compute Module Hns2600bpblc24r
All of
Intel Compute Module Hns2600bps Firmware	<02.01.0015
Intel Compute Module Hns2600bps
All of
Intel Compute Module Hns2600bps24 Firmware	<02.01.0015
Intel Compute Module Hns2600bps24
All of
Intel Compute Module Hns2600bpbr Firmware	<02.01.0015
Intel Compute Module Hns2600bpbr
All of
Intel Compute Module Hns2600bpqr Firmware	<02.01.0015
Intel Compute Module Hns2600bpqr
All of
Intel Compute Module Hns2600bpsr Firmware	<02.01.0015
Intel Compute Module Hns2600bpsr
All of
Intel Compute Module Hns2600bps24r Firmware	<02.01.0015
Intel Compute Module Hns2600bps24r
All of
Intel Compute Module Hns2600bpq24r Firmware	<02.01.0015
Intel Compute Module Hns2600bpq24r
All of
Intel Compute Module Hns2600bpb24 Firmware	<02.01.0015
Intel Compute Module Hns2600bpb24
All of
Intel Compute Module Hns2600bpb Firmware	<02.01.0015
Intel Compute Module Hns2600bpb
All of
Intel Compute Module Hns2600bpblc24 Firmware	<02.01.0015
Intel Compute Module Hns2600bpblc24
All of
Intel Compute Module Hns2600bpq Firmware	<02.01.0015
Intel Compute Module Hns2600bpq
All of
Intel Compute Module Hns2600bpq24 Firmware	<02.01.0015
Intel Compute Module Hns2600bpq24
All of
Intel Compute Module Liquid-cooled Hns2600bpbrct Firmware	<02.01.0015
Intel Compute Module Liquid-cooled Hns2600bpbrct
All of
Intel Server System Vrn2224bpaf6 Firmware	<02.01.0015
Intel Server System Vrn2224bpaf6
All of
Intel Server System Vrn2224bphy6 Firmware	<02.01.0015
Intel Server System Vrn2224bphy6
All of
Intel Server System Mcb2208wfaf5 Firmware	<02.01.0015
Intel Server System Mcb2208wfaf5
All of
Intel Server System Zsb2224bpaf2 Firmware	<02.01.0015
Intel Server System Zsb2224bpaf2
All of
Intel Server System Zsb2224bphy1 Firmware	<02.01.0015
Intel Server System Zsb2224bphy1
All of
Intel Server System Zsb2224bpaf1 Firmware	<02.01.0015
Intel Server System Zsb2224bpaf1

Remedy

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html

Never miss a vulnerability like this again

Reference Links

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html

CVE-2023-34431: Input Validation

Remedy

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact