Approved changes feed: RSS · Atom

cpe:2.3:a:ieisystem:uefi_firmware:8.4:*:*:*:*:*:*:*

part: a version: 8.4 update: *

VendorIeisystem (49e1b68b-189b-562f-b336-1811977e567d)
ProductUefi Firmware (48c14c1b-19dd-5684-867f-622b6eb5948a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-52080 vulnerable 2026-06-08 06:17:54.210698 Details available
IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical data in memory data is tampered with,a crash may occur.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T22:48:12.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41833 vulnerable 2026-06-08 06:11:07.135577 Details available
HIGH (7.5)
A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
Published: 2024-09-16T16:38:44.388Z
Updated: 2025-11-03T21:49:30.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23904 vulnerable 2026-06-08 05:56:04.671575 Details available
MEDIUM (6.1)
NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Published: 2024-09-16T16:38:44.985Z
Updated: 2025-11-03T21:47:18.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22351 vulnerable 2026-06-08 05:54:24.709888 Details available
MEDIUM (6.1)
Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Published: 2024-09-16T16:38:45.783Z
Updated: 2025-11-03T21:47:16.914Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.