Is CVE-2023-30768 in the CISA KEV catalog?

No. CVE-2023-30768 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-30768?

CVE-2023-30768 has a CVSS v3 base score of 7.7 (HIGH).

What is the EPSS score for CVE-2023-30768?

CVE-2023-30768 has an EPSS score of 0.17% (7th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-30768?

Upgrade server board s1200btl firmware to 0044 or later. Fixes are available for 64 affected products.

CVE & CISA-KEV Catalog

CVE-2023-30768

HIGH

7.7

CVSS v3

NVD

Description

Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.

CWE-284Improper Access Control

How to fix

Remediation Available

server board s1200btl firmwareNVD

Affected:< 0044Fixed in:0044CVE-2023-30768derived from NVD

server board s1200btlr firmwareNVD

Affected:< 0044Fixed in:0044CVE-2023-30768derived from NVD

server board s1200btlrm firmwareNVD

Affected:< 0044Fixed in:0044CVE-2023-30768derived from NVD

server board s1200bts firmwareNVD

Affected:< 0044Fixed in:0044CVE-2023-30768derived from NVD

server board s1200btsr firmwareNVD

Affected:< 0044Fixed in:0044CVE-2023-30768derived from NVD

server board s1200v3rpl firmwareNVD

Affected:< 0006Fixed in:0006CVE-2023-30768derived from NVD

server board s1200v3rpm firmwareNVD

Affected:< 0006Fixed in:0006CVE-2023-30768derived from NVD

server board s1200v3rpo firmwareNVD

Affected:< 0006Fixed in:0006CVE-2023-30768derived from NVD

server board s1200v3rps firmwareNVD

Affected:< 0006Fixed in:0006CVE-2023-30768derived from NVD

server board s1400fp2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s1400fp4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s1400sp2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s1400sp4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s1600jp2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s1600jp4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2400bb4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2400ep2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2400ep4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2400sc2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600co4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600coe firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600coeioc firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600cp2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600cp2ioc firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600cp2j firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600cp4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600cp4ioc firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600cw2 firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cw2r firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cw2s firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cw2sr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cwt firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cwtr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cwts firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600cwtsr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600gl firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600gz firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600ip4 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600ip4l firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600jf firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600jff firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600jfq firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600kp firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600kpf firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600kpfr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600kpr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600kptr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600tp firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600tpf firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600tpfr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600tpnr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600tpr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600wp firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600wpf firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600wpq firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s2600wt2 firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600wt2r firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600wtt firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600wttr firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s2600wtts1r firmwareNVD

Affected:< 0018Fixed in:0018CVE-2023-30768derived from NVD

server board s4600lh2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

server board s4600lt2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

workstation board w2600cr2 firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

workstation board w2600cr2l firmwareNVD

Affected:< 0005Fixed in:0005CVE-2023-30768derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredHigh

User InteractionRequired

ScopeChanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Exploit Intelligence

0.17%probability of exploitation in 30 days

7thpercentile

Low risk: more likely to be exploited than 7% of all known CVEs.

References

Vendor Advisory1

intel.com

Related Vulnerabilities

Other CWE-284 (Improper Access Control) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2023-27350	Critical	9.8	100%	KEV + Ransom	Fix
CVE-2019-1653	High	7.5	100%	KEV	-
CVE-2023-23752	Medium	5.3	100%	KEV	Fix
CVE-2023-29298	High	7.5	100%	KEV	-
CVE-2023-38205	High	7.5	100%	KEV	-
CVE-2024-27348	Critical	9.8	99%	KEV	Fix

Embed a live status badge for CVE-2023-30768

Markdown

[![CVE-2023-30768](https://tridentstack.com/cve/badge/CVE-2023-30768.svg)](https://tridentstack.com/cve/CVE-2023-30768)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-30768"><img src="https://tridentstack.com/cve/badge/CVE-2023-30768.svg" alt="CVE-2023-30768"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.