Potential Escalation of Privilege Vulnerability in Intel UEFI Firmware
CVE-2023-43626

8.7HIGH

Key Information:

Vendor

Intel

Vendor
CVE Published:
16 September 2024

What is CVE-2023-43626?

The vulnerability arises from improper access control in the UEFI firmware for certain Intel processors. This flaw may allow a privileged user with local access to influence system configuration or elevate privileges unexpectedly. The implications of this vulnerability could lead to unauthorized actions being carried out within affected systems, potentially compromising system integrity and security. Users and administrators are advised to review their firmware configurations and apply necessary updates to mitigate risks associated with this issue.

Affected Version(s)

UEFI firmware for some Intel(R) Processors See references

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.