Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 1.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Dell Poweredge Dsa2023355 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Nov 14, 2023 |
| Suse | — | Upgrade kernel-firmware-intelUpgrade kernel-firmware-atherosUpgrade kernel-firmware-marvellUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-mediaUpgrade kernel-firmware-soundUpgrade kernel-firmware-serialUpgrade kernel-firmware-iwlwifiUpgrade ucode-amdUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-qlogicUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-networkUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-brcmUpgrade kernel-firmwareUpgrade kernel-firmware-i915Upgrade kernel-firmware-platformUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-qcomUpgrade kernel-firmware-radeonUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-tiUpgrade kernel-firmware-presteraUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-nfpUpgrade kernel-firmware-realtekUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-all | Dec 7, 2023 | Nov 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub