Lucene search

K
cve[email protected]CVE-2023-22310
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-22310

2023-11-1419:15:16
CWE-421
CWE-362
web.nvd.nist.gov
12
cve-2023-22310
intel
uefi
firmware
race condition
denial of service
nvd

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Race condition in some Intelยฎ Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.

Affected configurations

NVD
Node
intelaptio_v_uefi_firmware_integrator_toolsMatch5.27.03.0003
AND
microsoftwindowsMatch-
Node
intelaptio_v_uefi_firmware_integrator_toolsMatch5.27.06.0017
AND
linuxlinux_kernelMatch-

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Aptio* V UEFI Firmware Integrator Tools",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-22310