What is CVE-2023-43636?

CVE-2023-43636 is a high-severity vulnerability in Lf-edge, Zededa Eve Os, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.8/10. Published 2023-09-20.

How severe is CVE-2023-43636?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Lf-edge, Zededa Eve Os

CVE-2023-43636

In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault. As per the “measured boot” design, the PCR values calculated at different stages of the boot process will ch…

EPSS: 0.001 (2.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Lf-edge, Zededa Eve Os — versions 9.0.0, 0
Linuxfoundation Edge_virtualization_engine

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

References

cve@asrg.io

Frequently asked questions

What is CVE-2023-43636?: CVE-2023-43636 is a high-severity vulnerability in Lf-edge, Zededa Eve Os, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.8/10. Published 2023-09-20.
How severe is CVE-2023-43636?: High severity. CVSS v3 base score is 8.8 out of 10.