Maple Labs

CVE search · CVE-2023-39538

CVE-2023-39538

high 7.8

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. 

Details

Status
Modified
Published
Last changed
Source
biossecurity@ami.com
Weakness
CWE-20, CWE-434

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H biossecurity@ami.comSecondary
CVSS 3.1 high 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • ami · aptio_v

References