CVE-2023-52711 HIGH

CVE-2023-52711

Vendor Huawei
Product CurieM-WFG9B
Weakness CWE-284
Published May 28, 2024
Last update August 2, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory thus potentially leading code execution in SMM

Key dates

02Disclosure timeline

May 28, 2024 CVE published
August 2, 2024 Record updated