A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
History

Tue, 17 Sep 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Ieisystem
Ieisystem uefi Firmware
CPEs cpe:2.3:a:ieisystem:uefi_firmware:8.4:*:*:*:*:*:*:*
Vendors & Products Ieisystem
Ieisystem uefi Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 16 Sep 2024 16:45:00 +0000

Type Values Removed Values Added
Description A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
Weaknesses CWE-362
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: intel

Published: 2024-09-16T16:38:44.388Z

Updated: 2024-09-16T19:39:24.963Z

Reserved: 2023-09-07T03:00:03.645Z

Link: CVE-2023-41833

cve-icon Vulnrichment

Updated: 2024-09-16T19:39:18.370Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-09-16T17:15:59.757

Modified: 2024-09-16T18:03:16.707

Link: CVE-2023-41833

cve-icon Redhat

No data.