VDB

GCVE-110-CERTCC-2013-552286

GCVE-110-CERTCC-2013-552286
Advisory PublishedCVSS 6.0/10
Vulnetix · Advisory published August 7, 2014
The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism.
Download JSON Open in Console

Risk Scores

CVSS 2.0
6.0/10
Medium · AV:L/AC:H/Au:S/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact4d1_population4d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score5.4remediation_levelNDreport_confidenceCenvironmental_score7.2509983744target_distributionHenvironmental_vectorCDP:MH/TD:H/CR:ND/IR:H/AR:ND

Aliases

CVE-2014-4859CVE-2014-4860

Transitive aliases

GSD-2014-4859GHSA-hpff-53rm-95gfGSD-2014-4860GHSA-wx73-9f2x-grc8

References

UEFI EDK2 Capsule Update vulnerabilities
url
UEFI EDK2 Capsule Update vulnerabilities
url
UEFI EDK2 Capsule Update vulnerabilities
url
UEFI EDK2 Capsule Update vulnerabilities
advisory

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›