Integer Overflow in Intel Aptio UEFI Firmware Integrator Tools
CVE-2023-22305

5.5MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Aptio* V Uefi Firmware Integrator Tools
Vendor
CVE Published:
14 November 2023

What is CVE-2023-22305?

An integer overflow vulnerability in Intel Aptio V UEFI Firmware Integrator Tools can be exploited by an authenticated user with local access. This vulnerability may allow the user to trigger a denial of service condition, disrupting the functionality of the firmware. Organizations using affected Intel products should review their systems and apply recommended patches to mitigate the potential risks.

Affected Version(s)

Intel(R) Aptio* V UEFI Firmware Integrator Tools See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.