Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2023-45236

Predictable TCP ISNs in EDK II Network Package

Description

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TianoCore edk2

Default version status: unaffected

  • edk2-stable202308affected

References