Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-45237

Use of a Weak PseudoRandom Number Generator in EDK II Network Package

Description

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TianoCore edk2

Default version status: unaffected

  • edk2-stable202308affected

References