CVE-2023-30768 Privilege escalation in Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family
A privileged local user can escalate privileges on Intel Server Board S2600WTT due to improper access control in the BIOS.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-30768?
CVE-2023-30768 is a high-severity vulnerability in Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family, published on 12 May 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.
Weakness: CWE-284
Which versions are affected by CVE-2023-30768?
It affects 64 products.
Products include Intel Server Board S1200btl Firmware, Intel Server Board S1200btlr Firmware, Intel Server Board S1200btlrm Firmware, Intel Server Board S1200bts Firmware, Intel Server Board S1200btsr Firmware, Intel Server Board S1200v3rpl Firmware and 58 more.
How do I fix CVE-2023-30768?
No fix has been published for CVE-2023-30768 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-30768 being exploited?
There is no known exploitation of CVE-2023-30768 in the wild and no public exploit code.
Sources
Also known as GHSA-fh94-9rhv-cq7q.