CVE-2025-20097

Feb. 12, 2025, 10:15 p.m.

4.3
Medium

Description

Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access.

Product(s) Impacted

Product Versions
OpenBMC Firmware for Intel Server M50FCP Family
  • ['before R01.02.0002']
OpenBMC Firmware for Intel Server D50DNP Family
  • ['before R01.02.0002']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-248
Uncaught Exception
An exception is thrown from a function, but it is not caught.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00990.html

Tags

CWE-248
secure@intel.com
2025-02-12
CVE-2025-20097

CVSS Score

4.3 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: LOW

    • CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

    View Vector String

Timeline

Published: Feb. 12, 2025, 10:15 p.m.
Last Modified: Feb. 12, 2025, 10:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

secure@intel.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.