CVE-2023-30559CWE-20CWE-345

Wireless Card Firmware Improperly Signed

Medium · published July 13, 2023

CVSS v3.1
5.2
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

The firmware update package for the wireless card is not properly signed and can be modified.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-345 · Insufficient Verification of Data Authenticity
Published
2023-07-13T17:50Z
EPSS history
Timeline
  • 13 JUL 17:50Z
    Wireless Card Firmware Improperly Signed
    cvelistv5