CVE-2023-45236

Name of the Vulnerable Software and Affected Versions EDK2 (affected versions not specified)

Description The EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number, which can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality. This issue can allow a remote attacker to obtain unauthorized access to confidential data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.