CVE-2023-31189
Estado: AnalizadaAlta (8.8)—
Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.21%
- Percentil entre todas las CVEs puntuadas: 11
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-287
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-31189",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-31189",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-08-14T19:21:57.416460Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secure@intel.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 5.2,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2
}
]
},
"affected": [
{
"source": "secure@intel.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Intel(R) Server Product OpenBMC firmware",
"versions": [
{
"status": "affected",
"version": "before version egs-1.09"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2024-02-14T14:15:50.310",
"references": [
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html",
"tags": [
"Vendor Advisory"
],
"source": "secure@intel.com"
},
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00922.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "secure@intel.com",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access."
},
{
"lang": "es",
"value": "La autenticación incorrecta en algunos firmware OpenBMC de productos de servidor Intel(R) anteriores a la versión egs-1.09 puede permitir que un usuario autenticado habilite la escalada de privilegios a través del acceso local."
}
],
"lastModified": "2026-06-17T05:56:30.307",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:intel:openbmc:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38AEA92C-5EC0-4BF9-BEA1-1B55EE1BE717",
"versionEndExcluding": "egs-1.09"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:intel:xeon_bronze_3408u:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "09E7DE0D-42DB-4F10-930B-A0129CC27CAC"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5403n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "562820DC-1CB4-4063-ACF0-00FE0A9B2E75"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5411n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4EDBC632-F76D-4E3A-9A0E-8BE1DB5A0DDB"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5412u:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "316A237D-7975-453E-B92C-896F6364E2F3"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5415\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE27B5E7-7F00-4A27-B2C5-E66DE71AEF08"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5416s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C14795D9-BC55-417A-8D90-661AA6D1391A"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5418n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9951E153-870C-4DC3-BFFB-4B870DA63AC9"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5418y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4E65EAAF-AD3E-4466-99F1-972CFB59D077"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5420\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9FBB4E2C-DFCE-4B95-9817-A2E0C4A8997F"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5423n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48A09287-D982-4AE6-B82E-BB772F384A84"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_5433n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "151E7C53-F9DA-47DD-828A-34A0740F5EF4"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6403n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C8DD9CF9-6A89-4538-B95B-6464914430DC"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6414u:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "05CF326D-3CE1-4270-B8E7-CE9A2A2A4409"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6416h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D24053A-FFD8-4BD8-8676-7CC117A4185F"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6418h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "94721676-CD1A-4056-BEBF-1523C3CE2A30"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6421n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3B4C7008-1E66-4FBD-A197-DFDF4C38FFE3"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6423n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "76A41E6F-3874-4137-B80F-E6C0A839BCCC"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6426y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4286B9B8-B329-4342-A8C3-AC9A85B6478F"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6428n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "975E43D4-B152-44A3-A64A-C9FCC37240B9"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6430:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AB6EA88D-45EB-419A-8ED0-4B32A1846DD6"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6433n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "003A0C42-8D2E-462F-9709-2A8C26D98247"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6433ne:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EF8F1C3A-64B1-44A8-97BD-8E915FB84B9F"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6434:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "204B416D-B75B-4A44-8D37-8C6B84B77EF3"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6434h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE8AEBC9-4A10-4D1F-B267-C9549521DDC8"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6438m:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0D150604-EF92-464A-9DA9-8F07DEA7EA7D"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6438n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "025106B8-53E0-485E-9009-0DA23D65F556"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6438y\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "20643FF8-CC86-4B1F-A230-BF634E676F0E"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6442y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C8CC5990-41FB-49A8-81C9-6A94A17FCBBE"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6443n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "337887FE-6938-4AB8-AE5A-10CAEFC7C350"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6444y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "60E9D7F4-5854-4900-BECD-0E55504719AF"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6448h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B1EC68B2-902A-400D-B473-6C01733C71CD"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6448y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "63140392-AA9E-43C1-8594-42E8B41C33CC"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6454s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CC71C847-8E80-4D85-823F-4567AF62D841"
},
{
"criteria": "cpe:2.3:h:intel:xeon_gold_6458q:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71CFAFD6-4111-48FD-8DB1-81CB64F2958C"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8444h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DC500965-35C1-4747-818C-44E4D8FA2CD5"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8450h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5A79B597-104B-4869-8FD2-DC64876E746A"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8452y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C528F941-F391-4B0F-85EA-71A1E039F3EB"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8454h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EF9A4BED-EFBA-4565-AF8D-ECBDF5934E2C"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8458p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED46098F-38C6-48CF-8BED-41423A6A4531"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8460h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CFD8A966-382A-4737-B56F-59D68831B501"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8460y\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5CCC2770-7DAE-41E9-A28F-FA742108174E"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8461v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FFE9690A-18D5-421A-B9B1-FD3FD6F5BB6E"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8462y\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "336A6519-66D9-4F2A-9597-39BAD742129E"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8468:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B1F65118-E8A7-44F1-A882-8B5E9C7E3C72"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8468h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0004ECE3-BECD-4E60-BE35-23DDAD1758FF"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8468v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AB861F62-6FA8-498A-B882-6E30814C15DC"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8470:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AD61523A-0CF0-4416-AC53-26F0415FA462"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8470n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AC3448FA-4298-45EE-BA58-3202C5851540"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8471n:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "569AE756-7CEC-44D7-9D4C-F1AE534F58DB"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8480\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BCDFD394-1E5A-44AF-AB7F-610FBE69102A"
},
{
"criteria": "cpe:2.3:h:intel:xeon_platinum_8490h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "73363441-FC21-4183-89CE-5F52BE8EAEBC"
},
{
"criteria": "cpe:2.3:h:intel:xeon_silver_4410t:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4A3B836B-2636-4015-9F64-6272E888A133"
},
{
"criteria": "cpe:2.3:h:intel:xeon_silver_4410y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "16968277-3B4A-4B98-944A-4FFA6FAA7FAF"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "secure@intel.com"
}