CVE-2023-20563

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access

High · published November 14, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Published
2023-11-14T18:54Z
EPSS history
Timeline
  • 14 NOV 18:54Z
    Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access
    cvelistv5