Lucene search

K
nvd[email protected]NVD:CVE-2023-31304
HistoryAug 13, 2024 - 5:15 p.m.

CVE-2023-31304

2024-08-1317:15:20
web.nvd.nist.gov
2
improper input validation
smu
attacker privileges
compromised physical function
pcie lane count
speed
availability loss.

CVSS3

2.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

EPSS

0

Percentile

9.5%

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF)     to modify the PCIe® lane count and speed, potentially leading to a loss of availability.

CVSS3

2.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2023-31304