CVE-2023-23904CWE-395

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local…

Medium · published September 16, 2024

CVSS v4.0
6.9
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-395 · Use of NullPointerException Catch to Detect NULL Pointer Dereference
Published
2024-09-16T16:38Z
EPSS history
Timeline
  • 16 SEP 16:38Z
    NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local…
    cvelistv5