CVE-2023-45235

highpriority · track · 35EPSS 0.012 · 69 %ileCHDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.22% (69th) EPSS
CVSS 8.8 · high
Is it mine?
110 products
Check your exposure
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixededk2-0:20220126gitbb1bba3d77-13.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:3017
  • Fixededk2-aarch64-0:20220126gitbb1bba3d77-13.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:3017
  • Fixededk2-ovmf-0:20220126gitbb1bba3d77-13.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:3017
  • Fixededk2-0:20221207gitfff6d81270b5-9.el9_2.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-tools-0:20221207gitfff6d81270b5-9.el9_2.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-tools-0:20221207gitfff6d81270b5-9.el9_2.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-tools-doc-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4419
  • Fixededk2-0:20220126gitbb1bba3d77-4.el8_8.5.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6845
  • Fixededk2-aarch64-0:20220126gitbb1bba3d77-4.el8_8.5.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6845
  • Fixededk2-ovmf-0:20220126gitbb1bba3d77-4.el8_8.5.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6845
  • Fixededk2-0:20190829git37eef91017ad-9.el8_2.5.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6849
  • Fixededk2-ovmf-0:20190829git37eef91017ad-9.el8_2.5.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6849
  • Fixededk2-0:20220126gitbb1bba3d77-3.el9_0.5.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6931
  • Fixededk2-aarch64-0:20220126gitbb1bba3d77-3.el9_0.5.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6931
  • Fixededk2-ovmf-0:20220126gitbb1bba3d77-3.el9_0.5.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:6931
  • Fixededk2-0:20200602gitca407c7246bf-4.el8_4.6.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8449
  • Fixededk2-0:20200602gitca407c7246bf-4.el8_4.6.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8449
  • Fixededk2-0:20200602gitca407c7246bf-4.el8_4.6.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8449
  • Fixededk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.6.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8449
  • Fixededk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8449
  • Fixededk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.6.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8449
  • Fixededk2-0:20220126gitbb1bba3d77-2.el8_6.6.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • Fixededk2-0:20220126gitbb1bba3d77-2.el8_6.6.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • Fixededk2-0:20220126gitbb1bba3d77-2.el8_6.6.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • Fixededk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • Fixededk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • Fixededk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • Fixededk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:8455
  • FixedAPC2200abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedAPC3100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedAPC4100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedAPC910abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedC80abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedMPC3100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC1200abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC2200abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC3100abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC900abb_psirt

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • Fixedovmf-0:2017+git1510945757.b2662641d5-3.55.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedovmf-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedovmf-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedovmf-tools-0:2017+git1510945757.b2662641d5-3.55.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedovmf-tools-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedovmf-tools-0:2017+git1510945757.b2662641d5-3.55.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedqemu-ovmf-x86_64-0:2017+git1510945757.b2662641d5-3.55.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedqemu-ovmf-x86_64-0:2017+git1510945757.b2662641d5-3.55.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedqemu-uefi-aarch64-0:2017+git1510945757.b2662641d5-3.55.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • FixedAPC2200cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedAPC3100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedAPC4100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedAPC910cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedC80cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedMPC3100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC1200cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC2200cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC3100cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • FixedPPC900cisa_csaf_ot

    The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • MitigationAPC2200abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC3100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC4100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC910abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationC80abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationMPC3100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC1200abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC2200abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC3100abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC900abb_psirt

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC2200cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC3100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC4100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationAPC910cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationC80cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationMPC3100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC1200cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC2200cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC3100cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • MitigationPPC900cisa_csaf_ot

    Deactivate the vulnerable component - The vulnerabilities exist in the Preboot eXecution Environment (PXE) of the UEFI firmware. If this functionality is not needed, it is recommended to disable it in the UEFI settings, thus making the vulnerabilities not exploitable. Limit accessibility - If PXE functionality is required, users should tightly restrict network traffic to legitimate users and block illegitimate PXE traffic, specifically related to IPv6. For instance, by blocking IPv6 network traffic on the control network firewall. https://help.br-automation.com/#/en/6/cyber-security/defense-in-depth-for-br-products/reference_architecture.html Refer to section “General security recommendations” for further advise on how to keep your system secure.

  • Workaroundedk2-0:20220126gitbb1bba3d77-13.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-13.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-13.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20221207gitfff6d81270b5-9.el9_2.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-debugsource-0:20221207gitfff6d81270b5-9.el9_2.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-0:20221207gitfff6d81270b5-9.el9_2.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-0:20221207gitfff6d81270b5-9.el9_2.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.3.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-debuginfo-0:20221207gitfff6d81270b5-9.el9_2.3.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-tools-doc-0:20221207gitfff6d81270b5-9.el9_2.3.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-4.el8_8.5.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-4.el8_8.5.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-4.el8_8.5.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20190829git37eef91017ad-9.el8_2.5.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20190829git37eef91017ad-9.el8_2.5.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-3.el9_0.5.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-3.el9_0.5.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-3.el9_0.5.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20200602gitca407c7246bf-4.el8_4.6.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20200602gitca407c7246bf-4.el8_4.6.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20200602gitca407c7246bf-4.el8_4.6.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.6.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20200602gitca407c7246bf-4.el8_4.6.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-2.el8_6.6.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-2.el8_6.6.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-0:20220126gitbb1bba3d77-2.el8_6.6.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-aarch64-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundedk2-ovmf-0:20220126gitbb1bba3d77-2.el8_6.6.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.6)redhat_csaf

    Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–8.8

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.18.3highAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · FSTEC (BDU) RU
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · ENISA EU
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · infosec@edk2.groups.ioexploitability 2.8 · impact 5.5
v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · OSV
v3.18.1highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H/E:P/RL:O/RC:Csecondary · ABB PSIRT
v3.18.3highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Hsecondary · SUSE Product Security
v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USprimaryCWE-119USCWE-119USCWE-119USCWE-119USCWE-120US
05

affected products (110)

Products and version ranges known to be affected.

showing 20 of 110
06

advisories (19)

Vendor and ecosystem advisories describing this.

  • RHSA-2024:3017Red Hat Security Advisory: edk2 security update2024-05-22csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:4419Red Hat Security Advisory: edk2 security update2024-07-09csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:6845Red Hat Security Advisory: edk2 security update2024-09-19csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:6849Red Hat Security Advisory: edk2 security update2024-09-19csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:6931Red Hat Security Advisory: edk2 security update2024-09-23csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:8449Red Hat Security Advisory: edk2 security update2024-10-24csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2024:8455Red Hat Security Advisory: edk2 security update2024-10-24csaf · redhat_csafUS

    An update for edk2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • SA24P003​B&R PCs vulnerable to PixieFail attack​2026-01-29csaf · abb_psirtCH

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS attacks, conduct DNS cache poisoning, or extract sensitive information.

  • SUSE-SU-2026:0196-1Security update for ovmf2026-01-21csaf · suse_csafDE

    Security update for ovmf

  • WID-SEC-W-2024-0126EDK2 NetworkPkg IP stack implementation: Mehrere SchwachstellenDeutsch2024-01-16csaf · cert_bundDE

    Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der EDK2 NetworkPkg IP stack implementation ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand auszulösen.

  • ICSA-26-141-02ABB B&R PCs2026-01-29icsa · cisa_csaf_otUS

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS attacks, conduct DNS cache poisoning, or extract sensitive information.

  • CVE-2023-452292024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

  • CVE-2023-452302024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

  • CVE-2023-452312024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

  • CVE-2023-452322024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

  • CVE-2023-452332024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability.

  • CVE-2023-452342024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

  • CVE-2023-452362024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

  • CVE-2023-452372024-01-16vendor · osvUS

    EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

07

also known as (5)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduosvabb_psirtcert_bundredhat_csafsuse_csafcisa_csaf_otNVDCVE.orgMITRE
published 2024-01-16modified 2026-06-17
10

references (19)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan