CVE-2023-39538 — Improper Input Validation in Aptiov

CWE-20 — Improper Input ValidationCWE-434 — Unrestricted File Upload3 documents3 sources
Severity
7.8HIGHNVD
CNA7.5
EPSS
0.0%
top 98.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
AMI Aptiov
Timeline
PublishedDec 6

Description

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5ami/aptiovBKS_5.0 — BKS_5.34

🔴Vulnerability Details

2
CVEList
Failure when uploading a Logo image file↗2023-12-06
▶
GHSA
GHSA-87fm-wcxm-mcmx: AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access↗2023-12-06
▶
CVE-2023-39538 — Improper Input Validation in Aptiov | cvebase