ID CVE-2023-45236
Summary EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
References
Vulnerable Configurations
  • cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:2017-11-07:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:2017-11-07:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:2020-10-21:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:2020-10-21:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:rc0:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:rc0:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202111:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202111:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202111:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202111:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202202:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202202:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202202:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202202:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202205:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202205:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202205:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202205:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202208:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202208:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202211:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202211:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202302:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202302:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202305:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202305:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202308:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202308:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202311:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202311:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-338
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 07-03-2024 - 17:15
Published 16-01-2024 - 16:15
Last modified 07-03-2024 - 17:15
Back to Top