ieisystem records
4 published records for vendor ieisystem.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2023-41833No exploit | A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege viaCWE-362 | High8.7 | — | 0.1% | Sep 16, 2024 |
30Monitor | CVE-2023-52080No exploit | IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function.CWE-120 | High7.7 | — | 0.1% | Apr 29, 2024 |
27Monitor | CVE-2023-22351No exploit | Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege CWE-787 | Medium6.9 | — | 0.1% | Sep 16, 2024 |
27Monitor | CVE-2023-23904No exploit | NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pCWE-395 | Medium6.9 | — | 0.1% | Sep 16, 2024 |
- CVE-2023-4183334Monitor
A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via
HighCVSS 8.7No exploitEPSS 0%Sep 16, 2024
- CVE-2023-5208030Monitor
IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function.
HighCVSS 7.7No exploitEPSS 0%Apr 29, 2024
- CVE-2023-2235127Monitor
Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege
MediumCVSS 6.9No exploitEPSS 0%Sep 16, 2024
- CVE-2023-2390427Monitor
NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p
MediumCVSS 6.9No exploitEPSS 0%Sep 16, 2024