CVE-2023-43626

Published Sep 16, 2024 CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Description

Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

UEFI firmware for some Intel(R) Processors

unaffected

Version	Status	Constraints
`See references`	affected	—

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2023-48026	Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.145% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://security.netapp.com/advisory/ntap-20241011-0009/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html

History

Nov 3, 2025 10:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://security.netapp.com/advisory/ntap-20241011-0009/

Jul 13, 2025 1:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00023}`	epss `{'score': 0.00024}`

Sep 17, 2024 2:30 AM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Intel Intel atom C2308 Firmware Intel atom C2316 Firmware Intel atom C2338 Firmware Intel atom C2350 Firmware Intel atom C2358 Firmware Intel atom C2508 Firmware Intel atom C2516 Firmware Intel atom C2518 Firmware Intel atom C2530 Firmware Intel atom C2538 Firmware Intel atom C2550 Firmware Intel atom C2558 Firmware Intel atom C2718 Firmware Intel atom C2730 Firmware Intel atom C2738 Firmware Intel atom C2750 Firmware Intel atom C2758 Firmware Intel atom C3000 Firmware Intel atom C3308 Firmware Intel atom C3336 Firmware Intel atom C3338 Firmware Intel atom C3338r Firmware Intel atom C3436l Firmware Intel atom C3508 Firmware Intel atom C3538 Firmware Intel atom C3558 Firmware Intel atom C3558r Firmware Intel atom C3558rc Firmware Intel atom C3708 Firmware Intel atom C3750 Firmware Intel atom C3758 Firmware Intel atom C3758r Firmware Intel atom C3808 Firmware Intel atom C3830 Firmware Intel atom C3850 Firmware Intel atom C3858 Firmware Intel atom C3950 Firmware Intel atom C3955 Firmware Intel atom C3958 Firmware Intel atom C5115 Firmware Intel atom C5125 Firmware Intel atom C5310 Firmware Intel atom C5315 Firmware Intel atom C5320 Firmware Intel atom C5325 Firmware
CPEs		cpe:2.3:o:intel:atom_c2308_firmware:-:::::::* cpe:2.3:o:intel:atom_c2316_firmware:-:::::::* cpe:2.3:o:intel:atom_c2338_firmware:-:::::::* cpe:2.3:o:intel:atom_c2350_firmware:-:::::::* cpe:2.3:o:intel:atom_c2358_firmware:-:::::::* cpe:2.3:o:intel:atom_c2508_firmware:-:::::::* cpe:2.3:o:intel:atom_c2516_firmware:-:::::::* cpe:2.3:o:intel:atom_c2518_firmware:-:::::::* cpe:2.3:o:intel:atom_c2530_firmware:-:::::::* cpe:2.3:o:intel:atom_c2538_firmware:-:::::::* cpe:2.3:o:intel:atom_c2550_firmware:-:::::::* cpe:2.3:o:intel:atom_c2558_firmware:-:::::::* cpe:2.3:o:intel:atom_c2718_firmware:-:::::::* cpe:2.3:o:intel:atom_c2730_firmware:-:::::::* cpe:2.3:o:intel:atom_c2738_firmware:-:::::::* cpe:2.3:o:intel:atom_c2750_firmware:-:::::::* cpe:2.3:o:intel:atom_c2758_firmware:-:::::::* cpe:2.3:o:intel:atom_c3000_firmware:-:::::::* cpe:2.3:o:intel:atom_c3308_firmware:-:::::::* cpe:2.3:o:intel:atom_c3336_firmware:-:::::::* cpe:2.3:o:intel:atom_c3338_firmware:-:::::::* cpe:2.3:o:intel:atom_c3338r_firmware:-:::::::* cpe:2.3:o:intel:atom_c3436l_firmware:-:::::::* cpe:2.3:o:intel:atom_c3508_firmware:-:::::::* cpe:2.3:o:intel:atom_c3538_firmware:-:::::::* cpe:2.3:o:intel:atom_c3558_firmware:-:::::::* cpe:2.3:o:intel:atom_c3558r_firmware:-:::::::* cpe:2.3:o:intel:atom_c3558rc_firmware:-:::::::* cpe:2.3:o:intel:atom_c3708_firmware:-:::::::* cpe:2.3:o:intel:atom_c3750_firmware:-:::::::* cpe:2.3:o:intel:atom_c3758_firmware:-:::::::* cpe:2.3:o:intel:atom_c3758r_firmware:-:::::::* cpe:2.3:o:intel:atom_c3808_firmware:-:::::::* cpe:2.3:o:intel:atom_c3830_firmware:-:::::::* cpe:2.3:o:intel:atom_c3850_firmware:-:::::::* cpe:2.3:o:intel:atom_c3858_firmware:-:::::::* cpe:2.3:o:intel:atom_c3950_firmware:-:::::::* cpe:2.3:o:intel:atom_c3955_firmware:-:::::::* cpe:2.3:o:intel:atom_c3958_firmware:-:::::::* cpe:2.3:o:intel:atom_c5115_firmware:-:::::::* cpe:2.3:o:intel:atom_c5125_firmware:-:::::::* cpe:2.3:o:intel:atom_c5310_firmware:-:::::::* cpe:2.3:o:intel:atom_c5315_firmware:-:::::::* cpe:2.3:o:intel:atom_c5320_firmware:-:::::::* cpe:2.3:o:intel:atom_c5325_firmware:-:::::::*
Vendors & Products		Intel Intel atom C2308 Firmware Intel atom C2316 Firmware Intel atom C2338 Firmware Intel atom C2350 Firmware Intel atom C2358 Firmware Intel atom C2508 Firmware Intel atom C2516 Firmware Intel atom C2518 Firmware Intel atom C2530 Firmware Intel atom C2538 Firmware Intel atom C2550 Firmware Intel atom C2558 Firmware Intel atom C2718 Firmware Intel atom C2730 Firmware Intel atom C2738 Firmware Intel atom C2750 Firmware Intel atom C2758 Firmware Intel atom C3000 Firmware Intel atom C3308 Firmware Intel atom C3336 Firmware Intel atom C3338 Firmware Intel atom C3338r Firmware Intel atom C3436l Firmware Intel atom C3508 Firmware Intel atom C3538 Firmware Intel atom C3558 Firmware Intel atom C3558r Firmware Intel atom C3558rc Firmware Intel atom C3708 Firmware Intel atom C3750 Firmware Intel atom C3758 Firmware Intel atom C3758r Firmware Intel atom C3808 Firmware Intel atom C3830 Firmware Intel atom C3850 Firmware Intel atom C3858 Firmware Intel atom C3950 Firmware Intel atom C3955 Firmware Intel atom C3958 Firmware Intel atom C5115 Firmware Intel atom C5125 Firmware Intel atom C5310 Firmware Intel atom C5315 Firmware Intel atom C5320 Firmware Intel atom C5325 Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 16, 2024 4:45 PM Description updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Weaknesses		CWE-284
References		https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H'}` cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}`

Subscriptions

Intel Atom C2308 Firmware Atom C2316 Firmware Atom C2338 Firmware Atom C2350 Firmware Atom C2358 Firmware Atom C2508 Firmware Atom C2516 Firmware Atom C2518 Firmware Atom C2530 Firmware Atom C2538 Firmware Atom C2550 Firmware Atom C2558 Firmware Atom C2718 Firmware Atom C2730 Firmware Atom C2738 Firmware Atom C2750 Firmware Atom C2758 Firmware Atom C3000 Firmware Atom C3308 Firmware Atom C3336 Firmware Atom C3338 Firmware Atom C3338r Firmware Atom C3436l Firmware Atom C3508 Firmware Atom C3538 Firmware Atom C3558 Firmware Atom C3558r Firmware Atom C3558rc Firmware Atom C3708 Firmware Atom C3750 Firmware Atom C3758 Firmware Atom C3758r Firmware Atom C3808 Firmware Atom C3830 Firmware Atom C3850 Firmware Atom C3858 Firmware Atom C3950 Firmware Atom C3955 Firmware Atom C3958 Firmware Atom C5115 Firmware Atom C5125 Firmware Atom C5310 Firmware Atom C5315 Firmware Atom C5320 Firmware Atom C5325 Firmware

Weaknesses