Lucene search

AMICVE-2023-39535

HistoryNov 14, 2023 - 10:15 p.m.

CVE-2023-39535

2023-11-1422:15:29

CWE-20

AMI

web.nvd.nist.gov

ami

aptiov

bios

vulnerability

cve-2023-39535

input validation

local network

exploit

confidentiality

integrity

availability

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.

Affected configurations

Nvd

Node

amiaptio_v

VendorProductVersionCPE
amiaptio_v*cpe:2.3:o:ami:aptio_v:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ami	aptio_v	*	cpe:2.3:o:ami:aptio_v::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AptioV",
    "vendor": "AMI",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]

References

9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023008.pdf

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-39535