Vulnerabilities

CVSS

8.3 High

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Risk score

66.4

Published

2024-01-16

Status

Published

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.

Weaknesses

CWE-119

Coverage 1

vulnerability

ABB B&R PCs

This CISA advisory details a vulnerability (CVE-2023-45229 through CVE-2023-45237) affecting ABB B&R PCs, specifically versions of the EDK2 Network Package. The vulnerability, a critical out-of-bounds read, allows for re…

CISA Advisories · May 21, 2026 Critical

CVE-2023-45229CVE-2023-45230CVE-2023-45231uefidhcpv6remote code execution

All articles mentioning it

Advisories and references

• github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h
• openwall.com/lists/oss-security/2024/01/16/2
• packetstormsecurity.com/files/176574/PixieFail-Proof-Of-Concepts.htm...
• security.netapp.com/advisory/ntap-20240307-0011/
• lists.fedoraproject.org/archives/list/[email protected]...
• lists.debian.org/debian-lts-announce/2025/06/msg00007.html
• kb.cert.org/vuls/id/132380