Database/Firmware, BMC & network fabric
Intel Ethernet Adapter manageability firmware (access control): Improper access control in Intel Ethernet adapter
Impact
Improper access control in Intel Ethernet adapter manageability firmware, allowing an authenticated user to escalate privilege. Same NC-SI sideband surface as its sibling — the difference is it needs an account, which in a bare-metal rental means the tenant. A tenant escalating through the manageability engine is a tenant reaching toward the BMC of the machine they rented, and from there toward the operator's management network.
Who can reach it
Authenticated user — on bare metal, the tenant with host access.
What to do
OEM firmware bundle update for adapter manageability firmware plus cold power cycle. Verify NC-SI is actually needed on your platform; where the server has a dedicated BMC NIC, disabling the sideband channel in BIOS/BMC config removes this path entirely and is a config change rather than a flash.
References
Related entries
- Crypto API Toolkit for Intel SGX: Improper access control in the SGX Crypto API Toolkit lets an authenticated userCVE-2022-21163 · Crypto API Toolkit for Intel SGXHigh
- HPE iLO 5 (local privilege escalation to code execution): An unprivileged user can execute arbitrary code in the iLOCVE-2022-28627 · HPE iLO 5 (local privilege escalation to code execution)High
- Phoenix SecureCore Technology 4 (SMI handler, improper access control): An SMI handler with missing access control letsCVE-2023-31100 · Phoenix SecureCore Technology 4 (SMI handler, improper access control)High
- AMD Secure Processor - XGMI Trusted Agent (type confusion): Type confusion in the ASP's XGMI Trusted Agent means aCVE-2023-31323 · AMD Secure Processor - XGMI Trusted Agent (type confusion)High
- Dell SmartFabric OS10 (hard-coded password): A hard-coded password in OS10 10.5.6.x gives an unauthenticated attackerCVE-2024-48831 · Dell SmartFabric OS10 (hard-coded password)High
- Supermicro BMC firmware update signature/validation logic on the X13SEM-F motherboard family: The operator losesCVE-2025-12007 · Supermicro BMC firmware update signature/validation logic on the X13SEM-F motherboard familyHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.