CVE-2023-39539

Summary

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. 

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper Input Validation
• CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type

ADP Enrichment

CVE Program Container

Additional References

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023009.pdf
• https://www.kb.cert.org/vuls/id/811862
• https://security.netapp.com/advisory/ntap-20240105-0003/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023009.pdf
• https://www.kb.cert.org/vuls/id/811862
• https://security.netapp.com/advisory/ntap-20240105-0003/

• ←Previous
• Next→