Potential Privileged User Enabled Denial of Service Vulnerability in UEFI Firmware
CVE-2023-25546

1.8LOW

Key Information:

Vendor

Intel

Vendor
CVE Published:
16 September 2024

What is CVE-2023-25546?

An out-of-bounds read vulnerability exists in the UEFI firmware for specific Intel(R) processors. This flaw can potentially be exploited by a privileged user with local access, enabling them to cause a denial of service condition. Affected users and organizations should apply security patches and mitigations described in the Intel security advisory to protect their systems against potential exploits.

Affected Version(s)

UEFI firmware for some Intel(R) Processors See references

References

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-25546 : Potential Privileged User Enabled Denial of Service Vulnerability in UEFI Firmware