Lucene search
Ubuntu.comUB:CVE-2023-49721HistoryFeb 14, 2024 - 12:00 a.m.
CVE-2023-49721
2024-02-1400:00:00
ubuntu.com
ubuntu.com
2
uefi shell
edk2
lxd
os-resident attacker
secure boot
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
15.5%
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD.
This allows an OS-resident attacker to bypass Secure Boot.
Bugs
Related
nvd
nvd
CVE-2023-49721
2024-02-14 22:15:47
debiancve
debiancve
CVE-2023-49721
2024-02-14 22:15:47
cvelist
cvelist
CVE-2023-49721
2024-02-14 21:57:40
prion
prion
Default configuration
2024-02-14 22:15:00
cve
cve
CVE-2023-49721
2024-02-14 22:15:47
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
15.5%
Related for UB:CVE-2023-49721