BMC Firmware Vulnerability for Intel® Server Boards, Intel® Compute Modules, and Intel® Server Systems (INTEL-SA-00130)

Documentation

Product Information & Documentation

000029387

11/20/2023

The security of our products and our customers’ data is a top Intel priority. Product security updates are periodically delivered through a process of coordinated disclosure.

Intel has identified a security vulnerability that could potentially place affected platforms at risk.

The issue affects the BMC Firmware in Intel® Server Boards, Intel® Compute Modules, and Intel® Server Systems that could potentially allow an attacker with administrative privileges to make unauthorized read/writes to the SMBUS.

 

Affected products

 

Intel® Server Boards Intel® Compute Modules Intel® Server Systems
BBS2600BPB HNS2600BPB R1304WF0YS
BBS2600BPQ HNS2600BPQ R1304WFTYS
BBS2600BPS HNS2600BPS R1208WFTYS
S2600WFO HNS2600BPB24 R2308WFTZS
S2600WFQ HNS2600BPQ24 R2208WF0ZS
S2600WFT HNS2600BPS24 R2208WFTZS
S2600STB HNS2600BPBLC R2208WFQZS
S2600STQ HNS2600BPBLC24 R2312WF0NP
BBS2600STB HNS2600KPR R2312WFTZS
BBS2600STQ HNS2600KPFR R2312WFQZS
S2600WT2R HNS2600TPR R2224WFQZS
S2600WTTR HNS2600TPFR R2224WFTZS
S2600WTTS1R HNS2600TPNR R1304WTTGSR
DBS2600CW2R HNS2600TP24R R1304WT2GSR
DBS2600CWTR HNS2600TP24SR R1208WTTGSR
DBS2600CW2SR HNS2600TP24STR R1208WT2GSR
DBS2600CWTSR HNS7200APR R2208WT2YSR
S2600KPR HNS7200APRL R2208WTTYSR
S2600KPFR HNS7200AP R2208WTTYC1R
S2600KPTR HNS7200APL R2308WTTYSR
S2600TPR   R2312WTTYSR
S2600TPFR   R2224WTTYSR
S2600TPTR    
S2600TPNR    
S7200APR    
BBS7200APL    
BBS7200AP    

 

Recommendations

Intel recommends that customers impacted by this Security Advisory upgrade to the latest firmware release for your specific platform as indicated in the list below.

For systems based on the Intel® Server Board S2600BP family, the platform firmware package is 00.01.0013:

For systems based on the Intel® Server Board S2600WF family, the platform firmware package is 00.01.0013:

For systems based on the Intel® Server Board S2600ST family, the platform firmware package is 00.01.0013:

For systems based on the Intel® Server Board S7200AP family, the platform firmware package is R01.03.0018:

For systems based on the Intel® Server Board S2600TP family, the platform firmware package is R01.01.0024:

For systems based on the Intel® Server Board S2600KP family, the platform firmware package is R01.01.0024:

For systems based on the Intel® Server Board S2600CW family, the platform firmware package is R01.01.0024:

For systems based on the Intel® Server Board S2600WT family, the platform firmware package is R01.01.0024:

View Intel Security Advisory INTEL-SA-00130.