CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

12 matches found

NVD•added 2024/02/14 10:15 p.m.•15 views

CVE-2023-48733

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...

6.7CVSS6.7AI score0.00256EPSS

Exploits0References5

OSV•added 2024/02/14 10:15 p.m.•3 views

CVE-2023-49721

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...

6.7CVSS7AI score0.00256EPSS

Exploits0References4

NVD•added 2024/02/14 10:15 p.m.•5 views

CVE-2023-49721

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...

6.7CVSS6.4AI score0.00237EPSS

Exploits0References4

Prion•added 2024/02/14 10:15 p.m.•21 views

Default configuration

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...

4CVSS7AI score0.00256EPSS

Exploits0References4

CVE•added 2024/02/14 9:57 p.m.•48 views

CVE-2023-49721

CVE-2023-49721 describes an insecure default in Ubuntu’s EDK2 firmware where UEFI Shell access was left enabled in LXD, enabling an OS-resident attacker with local access to bypass Secure Boot. Connected documents corroborate a cross-release pattern (Ubuntu edk2 packages) and note remediation in ...

6.7CVSS6.4AI score0.00237EPSS

Exploits0References4Affected Software2

Cvelist•added 2024/02/14 9:57 p.m.•15 views

CVE-2023-49721

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...

6.7CVSS6.6AI score0.00237EPSS

Exploits0References4

Debian CVE•added 2024/02/14 9:57 p.m.•15 views

CVE-2023-49721

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...

6.7CVSS6.4AI score0.00237EPSS

Exploits0

CVE•added 2024/02/14 9:54 p.m.•87 views

CVE-2023-48733

Summary: CVE-2023-48733 describes an insecure default in Ubuntu’s EDK2 firmware that enables the UEFI Shell, allowing an OS-resident attacker to bypass Secure Boot locally. What is affected: Ubuntu’s edk2 UEFI firmware packages (EDK2) shipped with a default that enables the UEFI Shell. Root cause...

6.7CVSS6.7AI score0.00256EPSS

Exploits0References5Affected Software2

Debian CVE•added 2024/02/14 9:54 p.m.•31 views

CVE-2023-48733

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...

6.7CVSS6.3AI score0.00256EPSS

Exploits0