GCVE-110-CERTCC-2013-758382

Advisory PublishedCVSS 6.0/10

Vulnetix · Advisory published May 27, 2014

Certain firmware implementations may not correctly protect and validate information contained in certain UEFI variables. Exploitation of such vulnerabilities could potentially lead to bypass of security features and/or denial of service for the platform.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.0/10

Medium · AV:L/AC:H/Au:S/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.7remediation_levelOFreport_confidenceCenvironmental_score3.53546073216target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:H/AR:ND

References

Unauthorized modification of UEFI variables in UEFI systems

url

Unauthorized modification of UEFI variables in UEFI systems

url

Unauthorized modification of UEFI variables in UEFI systems

url

Unauthorized modification of UEFI variables in UEFI systems

advisory

Browse GCVE Records

72,580 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON