Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-45237

Опубликовано: 16 янв. 2024
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*
Версия до 202311 (включая)

EPSS

Процентиль: 58%
0.00376
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-338
CWE-338

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 1 года назад

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

CVSS3: 7.5
redhat
больше 1 года назад

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

CVSS3: 7.5
msrc
около 1 года назад

Описание отсутствует

CVSS3: 5.3
debian
больше 1 года назад

EDK2's Network Package is susceptible to a predictable TCP Initial Seq ...

CVSS3: 5.3
github
больше 1 года назад

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

EPSS

Процентиль: 58%
0.00376
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-338
CWE-338