Lucene search
HistoryJan 16, 2024 - 4:15 p.m.
CVE-2023-45237
edk2
network package
vulnerability
predictable
tcp
sequence number
unauthorized access
loss of confidentiality
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
28.1%
EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially lead to a loss of Confidentiality.
Affected configurations
Node
tianocoreedk2Range≤202311
Related
redhatcve
redhatcve
CVE-2023-45237
2024-01-17 03:56:10
cvelist
cvelist
prion
prion
Design/Logic Flaw
2024-01-16 16:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2023-45237)
2024-07-03 00:00:00
Oracle Linux 9 : edk2 (ELSA-2024-4749)
2024-07-24 00:00:00
Oracle Linux 8 : edk2 (ELSA-2024-5297)
2024-08-13 00:00:00
cbl_mariner
cbl_mariner
cve
cve
CVE-2023-45237
2024-01-16 16:15:13
alpinelinux
alpinelinux
CVE-2023-45237
2024-01-16 16:15:13
ubuntucve
ubuntucve
CVE-2023-45237
2024-01-16 00:00:00
debiancve
debiancve
CVE-2023-45237
2024-01-16 16:15:13
oraclelinux
oraclelinux
edk2 security update
2024-08-13 00:00:00
edk2 security update
2024-07-24 00:00:00
osv
osv
Moderate: edk2 security update
2024-08-13 00:00:00
Moderate: edk2 security update
2024-07-23 00:00:00
ovmf-202405-1.1 on GA media
2024-09-13 00:00:00
redhat
redhat
(RHSA-2024:5297) Moderate: edk2 security update
2024-08-13 14:51:59
(RHSA-2024:4749) Moderate: edk2 security update
2024-07-23 15:13:16
(RHSA-2024:4419) Important: edk2 security update
2024-07-09 09:41:20
almalinux
almalinux
Moderate: edk2 security update
2024-07-23 00:00:00
Moderate: edk2 security update
2024-08-13 00:00:00
thn
thn
openvas
openvas
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2024-1996)
2024-07-19 00:00:00
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2024-2014)
2024-07-19 00:00:00
cert
cert
Vulnerabilities in EDK2 NetworkPkg IP stack implementation.
2024-01-16 00:00:00
redos
redos
ROS-20240625-06
2024-06-25 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
28.1%
Related for NVD:CVE-2023-45237