{"id":"CVE-2025-20097","state":"PUBLISHED","title":"Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potenti","description":"Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access.","publishedAt":"2025-02-12T21:19:44.632Z","updatedAt":"2025-02-13T19:48:34.352Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family"],"affected":[{"vendor":"n/a","product":"Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family","defaultStatus":"unaffected","versions":[{"version":"before version R01.02.0002","status":"affected"}]}],"references":["https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00990.html"],"weaknesses":["CWE-248"],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/20xxx/CVE-2025-20097.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-20097","state":"PUBLISHED","datePublished":"2025-02-12T21:19:44.632Z","dateUpdated":"2025-02-13T19:48:34.352Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2024-10-12T03:00:15.472Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family","defaultStatus":"unaffected","versions":[{"version":"before version R01.02.0002","status":"affected"}]}],"references":[{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00990.html","name":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00990.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Denial of Service"},{"cweId":"CWE-248","lang":"en","description":"Uncaught Exception","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2025-02-12T21:19:44.632Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-13T19:48:29.319306Z","id":"CVE-2025-20097","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-13T19:48:34.352Z"}}]}}}