CVE Vulnerabilities

CVE-2023-22310

Race Condition During Access to Alternate Channel

Published: Nov 14, 2023 | Modified: Nov 21, 2024
CVSS 3.x
4.7
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.

Weakness

The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.

Affected Software

Name Vendor Start Version End Version
Aptio_v_uefi_firmware_integrator_tools Intel 5.27.03.0003 (including) 5.27.03.0003 (including)

References