CVE-2023-31305

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to…

Low · published August 13, 2024

CVSS v3.1
1.9
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.

The record
Technical detail
CVSS v3.1
1.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Published
2024-08-13T16:53Z
EPSS history
Timeline
  • 13 AUG 16:53Z
    Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to…
    cvelistv5