CVE-2023-31345

HIGH7.5

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution

Published Feb 11, 2025

Modified 2 weeks ago

Details

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

References

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedFeb 11, 2025

ModifiedFeb 26, 2026

CVE-2023-31345 | Mondoo Vulnerability Intelligence