Security Risk in EDK2 IpSecDxe.efi Encrypted Private Key
CVE-2021-28213

7.5HIGH

Key Information:

Vendor

Tianocore

Status
Edk Ii
Vendor
CVE Published:
11 June 2021

What is CVE-2021-28213?

The presence of an encrypted private key in the EDK2 IpSecDxe.efi component poses potential security risks. This vulnerability could allow unauthorized access to sensitive information and compromise the integrity of secured communications, emphasizing the need for robust security measures within affected systems.

Affected Version(s)

EDK II edk2-stable201905

References

https://bugzilla.tianocore.org/show_bug.cgi?id=1866
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.