Lucene search
China National Vulnerability DatabaseCNVD-2023-71237HistoryAug 16, 2023 - 12:00 a.m.
Siemens EFI Boot Guard Code Execution Vulnerability
2023-08-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
siemens
uefi
boot loader
code execution
vulnerability
input validation
cleanup
attack
arbitrary code
privileged userspace
libraries
tools
cnvd
0.0005 Low
EPSS
Percentile
17.5%
Siemens EFI Boot Guard is a simple UEFI boot loader from Siemens (Germany). A code execution vulnerability exists in Siemens EFI Boot Guard versions prior to 0.15, which stems from insufficient input validation and cleanup, and can be exploited by an attacker to execute arbitrary code in privileged userspace libraries and tools.
| CPE | Name | Operator | Version |
|---|---|---|---|
| siemens siemens efi boot guard | lt | 0.15 |
Related
debiancve
debiancve
CVE-2023-39950
2023-08-14 21:15:13
osv
osv
CVE-2023-39950
2023-08-14 21:15:13
nvd
nvd
CVE-2023-39950
2023-08-14 21:15:13
prion
prion
Code injection
2023-08-14 21:15:00
cve
cve
CVE-2023-39950
2023-08-14 21:15:13
ubuntucve
ubuntucve
CVE-2023-39950
2023-08-14 00:00:00
cvelist
cvelist
CVE-2023-39950 Insufficient input validation in efibootguard
2023-08-14 20:17:29