CVE-2023-23904 - NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access

Back Back to CVE browser

MEDIUM

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access

Published Sep 16, 2024

6.9

MEDIUM

CVSS 4.0

EPSS 0.14%

Description

NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Vendor n/a Product UEFI firmware for some Intel(R) Processors Default
unaffected
- Version
  See references
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

UEFI firmware for some Intel(R) Processors

unaffected

Version	Status	Constraints
See references	affected	-

Vendor Ieisystem Product Uefi Firmware Default
n/a
- Version
  8.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ieisystem

Uefi Firmware

n/a

Version	Status	Constraints
8.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-395

References (2)

Link	Providers	Tags
https://security.netapp.com/advisory/ntap-20241011-0009/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner intel

Published Sep 16, 2024

Updated Nov 3, 2025

Reserved Feb 17, 2023

Link CVE-2023-23904

CISA Vulnrichment

Updated Sep 16, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2023-23904

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-23904