CVE-2023-25600

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 03/08/2023 Updated: 08/08/2023

CVSS v3 Base Score: 7.1 | Impact Score: 5.2 | Exploitability Score: 1.8

VMScore: 0

An issue exists in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, leading to out-of-bounds memory reads and a denial of service. This is fixed in version 01.01.04.0016.

Vulnerable Product	Search on Vulmon	Subscribe to Product
insyde insydecrpkg

CWE-125 https://www.insyde.com/security-pledge/SA-2023028 https://www.insyde.com/security-pledge https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-25600

Vulnerability Summary

References

Vulmon Search

About

Products

Connect