Race Condition Vulnerability in Intel System Security Report and Resources Defense Firmware
CVE-2023-48366

5.6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) System Security Report And System Resources Defense Firmware
Vendor
CVE Published:
12 February 2025

What is CVE-2023-48366?

A race condition vulnerability exists in specific firmware components of Intel's System Security Report and System Resources Defense. This flaw permits a privileged user to potentially access sensitive information through local means, creating avenues for information disclosure that could compromise system integrity.

Affected Version(s)

Intel(R) System Security Report and System Resources Defense firmware See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-48366 : Race Condition Vulnerability in Intel System Security Report and Resources Defense Firmware