Potential Escalation of Privilege Vulnerability in Intel BIOS Guard

CVE-2023-28402

What is CVE-2023-28402?

An improper input validation vulnerability exists in certain versions of Intel BIOS Guard firmware, which may enable a privileged user to potentially escalate privileges through local access. This vulnerability highlights the critical importance of robust input validation mechanisms, especially in firmware-level security controls. Users and organizations relying on affected firmware versions should take appropriate measures to mitigate risks associated with this vulnerability.

References