CVE-2023-27504

Published: May 16, 2024Modified: Jun 17, 2026Deferred

7.2

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Exploitability: 0.8 / Impact: 5.8

Source: secure@intel.com (Secondary)

Description

Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Related CWEs

CWE-92

DEPRECATED: Improper Sanitization of Custom Special Characters

This entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.