CVE-2023-43630

Summary

CVE-2023-43630 is a vulnerability affecting the sealing and unsealing process of a "vault" key in a security system. The key is not properly sealed with PCR14, which should be included in the process. This issue was introduced by a commit ("7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4") that only updated the SHA256 instance of PCR14, leaving the SHA1 instance unchanged. Consequently, changes to the config partition would not be measured, posing a risk of unauthorized modification. An attacker exploiting this vulnerability could modify the config partition without triggering a measured boot, gaining full control over the device and access to the encrypted "vault" contents. Despite a partial mitigation through the use of SHA256 and SHA1 PCRs, the vulnerability persists due to the incomplete update to the PCR14 sealing process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.