Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87019
HistoryNov 23, 2022 - 12:00 a.m.

iPXE Information Disclosure Vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
ipxe
information disclosure
vulnerability
tls_new_ciphertext

EPSS

0.001

Percentile

19.4%

iPXE is an iPXE open source web bootloader. iPXE iPXE versions prior to 2022.11.08 are vulnerable to an information disclosure vulnerability that affects the tls_new_ciphertext function in the component TLS src/net/tls.c file, which could be exploited by an attacker to obtain sensitive information.

EPSS

0.001

Percentile

19.4%