Potential Escalation of Privilege Vulnerability in Intel BIOS Guard
CVE-2023-28402

7.2HIGH

Key Information:

Vendor
Intel
Vendor
CVE Published:
16 May 2024

Summary

An improper input validation vulnerability exists in certain versions of Intel BIOS Guard firmware, which may enable a privileged user to potentially escalate privileges through local access. This vulnerability highlights the critical importance of robust input validation mechanisms, especially in firmware-level security controls. Users and organizations relying on affected firmware versions should take appropriate measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) BIOS Guard firmware See references

References

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.