VULNERABILITY INTELLIGENCE

CVE-2023-45231

CVSS score6.5 MEDIUM
EPSS probability0.85%
CISA KEVNot currently listed
Published2024-01-16
Last modified2026-06-17

Description

EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.