CVE-2023-31276
Published: 12 February 2025
Summary
CVE-2023-31276 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Intel (inferred from references). Its CVSS base score is 8.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 19.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and AC-6 (Least Privilege).
Deeper analysis
CVE-2023-31276 is a heap-based buffer overflow vulnerability (CWE-122) in the Baseboard Management Controller (BMC) firmware for several Intel server boards, including the Intel Server Board S2600WF, S2600ST, and S2600BP prior to version 02.01.0017, as well as the Intel Server Board M50CYP and D50TNP prior to version R01.01.0009. Published on 2025-02-12, it carries a CVSS v3.1 base score of 8.2 (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H), indicating high severity due to its potential for significant confidentiality, integrity, and availability impacts with a changed scope.
A privileged user with local access can exploit this vulnerability by triggering the heap-based buffer overflow in the BMC firmware, potentially enabling escalation of privileges. The attack requires high privileges (PR:H) and local access (AV:L) with low complexity (AC:L) and no user interaction (UI:N), allowing the attacker to gain elevated control over the affected system.
Intel's security advisory (INTEL-SA-00990) details the issue and recommends updating the BMC firmware to version 02.01.0017 or later for the S2600WF, S2600ST, and S2600BP models, and to version R01.01.0009 or later for the M50CYP and D50TNP models as the primary mitigation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-35590
Vulnerability details
Heap-based buffer overflow in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, before version 02.01.0017 and Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP before version R01.01.0009 may allow a privileged…
more
user to enable escalation of privilege via local access.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Heap buffer overflow in BMC firmware directly enables local privilege escalation by a privileged user.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the heap-based buffer overflow vulnerability in BMC firmware by requiring timely identification, testing, and application of Intel's recommended firmware updates.
Implements memory protections such as ASLR and non-executable memory segments that mitigate exploitation of the heap buffer overflow even prior to full patching.
Enforces least privilege to restrict the number and scope of high-privilege (PR:H) accounts with local access that could exploit the vulnerability for escalation.