Strix
26.1K

CVE-2023-25756

HIGHCVSS 8/10EPSS 0.40%

Last modified

CVE-2023-25756 is a high-severity vulnerability rated 8/10 on the CVSS scale. Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.

Description

Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

Metrics

CVSS 3.1
8/10

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.40%

32.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
IntelAtom X6200fe FirmwareAll versions
IntelAtom X6211e FirmwareAll versions
IntelAtom X6212re FirmwareAll versions
IntelAtom X6413e FirmwareAll versions
IntelAtom X6414re FirmwareAll versions
IntelAtom X6425e FirmwareAll versions
IntelAtom X6425re FirmwareAll versions
IntelAtom X6427fe FirmwareAll versions
IntelCeleron 1000m FirmwareAll versions
IntelCeleron 1005m FirmwareAll versions
IntelCeleron 1007u FirmwareAll versions
IntelCeleron 1017u FirmwareAll versions
IntelCeleron 1019y FirmwareAll versions
IntelCeleron 1020e FirmwareAll versions
IntelCeleron 1020m FirmwareAll versions
IntelCeleron 1037u FirmwareAll versions
IntelCeleron 1047ue FirmwareAll versions
IntelCeleron 2000e FirmwareAll versions
IntelCeleron 2002e FirmwareAll versions
IntelCeleron 2950m FirmwareAll versions
IntelCeleron 2955u FirmwareAll versions
IntelCeleron 2957u FirmwareAll versions
IntelCeleron 2961y FirmwareAll versions
IntelCeleron 2970m FirmwareAll versions
IntelCeleron 2980u FirmwareAll versions
IntelCeleron 2981u FirmwareAll versions
IntelCeleron 3205u FirmwareAll versions
IntelCeleron 3215u FirmwareAll versions
IntelCeleron 3755u FirmwareAll versions
IntelCeleron 3765u FirmwareAll versions
IntelCeleron 3855u FirmwareAll versions
IntelCeleron 3865u FirmwareAll versions
IntelCeleron 3867u FirmwareAll versions
IntelCeleron 3955u FirmwareAll versions
IntelCeleron 3965u FirmwareAll versions
IntelCeleron 3965y FirmwareAll versions
IntelCeleron 4205u FirmwareAll versions
IntelCeleron 4305u FirmwareAll versions
IntelCeleron 4305ue FirmwareAll versions
IntelCeleron 5205u FirmwareAll versions
IntelCeleron 5305u FirmwareAll versions
IntelCeleron 6305 FirmwareAll versions
IntelCeleron 6305e FirmwareAll versions
IntelCeleron 6600he FirmwareAll versions
IntelCeleron 725c FirmwareAll versions
IntelCeleron 7300 FirmwareAll versions
IntelCeleron 7305 FirmwareAll versions
IntelCeleron 7305e FirmwareAll versions
IntelCeleron 7305l FirmwareAll versions
IntelCeleron 787 FirmwareAll versions

Showing 50 of 629 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-25756?
Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
How severe is CVE-2023-25756?
CVE-2023-25756 has a CVSS score of 8/10 (HIGH severity). The EPSS model estimates a 0.40% probability of exploitation in the next 30 days.
How do I fix CVE-2023-25756?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-25756?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST