SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-30768

Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.

MEDIUM 6.7EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1
6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.17% probability · 7th percentile
CISA KEV
Not listed
Weakness
CWE-284
Affected
intel/server board s1200v3rpl firmware · intel/server board s1200v3rpm firmware · intel/server board s1200v3rpo firmware · intel/server board s1200v3rps firmware · intel/server board s1400fp2 firmware · intel/server board s1400fp4 firmware · intel/server board s1400sp4 firmware · intel/server board s1400sp2 firmware · intel/server board s1600jp2 firmware · intel/server board s1600jp4 firmware · intel/server board s2400bb4 firmware · intel/server board s2400ep2 firmware · intel/server board s2400ep4 firmware · intel/server board s2400sc2 firmware · intel/server board s2600co4 firmware · intel/server board s2600coe firmware · intel/server board s2600coeioc firmware · intel/server board s2600cp2 firmware · intel/server board s2600cp2ioc firmware · intel/server board s2600cp2j firmware · +40 more
Source
secure@intel.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.