CVE-2023-25546

Summary

CVE-2023-25546 identifies an out-of-bounds read vulnerability in the UEFI firmware affecting certain Intel® Processors, which could potentially enable denial of service if exploited by a privileged user with local access. The vulnerability has a CVSS score of 2.5, categorized as low severity, but requires high privileges and presents a high attack complexity. While there is no impact on confidentiality or integrity, the availability impact is rated as low. To remediate this issue, users are advised to apply updates provided by Intel as outlined in their security advisory (Intel SA-01071). Organizations should be aware that even though the exploitability score is moderate (0.8), successful exploitation could disrupt services within their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.