Lucene search
HistoryAug 13, 2024 - 5:15 p.m.
CVE-2023-31305
weak iv
pmfw
information disclosure
CVSS3
1.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
9.5%
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.
Related
cve
cve
CVE-2023-31305
2024-08-13 17:15:20
vulnrichment
vulnrichment
CVE-2023-31305
2024-08-13 16:53:42
cvelist
cvelist
CVE-2023-31305
2024-08-13 16:53:42
amd
amd
AMD Graphics Driver Vulnerabilities – August 2024
2024-08-13 00:00:00
CVSS3
1.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2023-31305