CVE-2023-4693
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
An out-of-bounds read flaw was found in the GRUB2 NTFS filesystem driver. A physically present attacker can present a specially crafted NTFS image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, posing a high confidentiality risk.
Risk Assessment
The organization is at risk of leaking sensitive data stored in memory or EFI variables, potentially exposing encryption keys, passwords, or other confidential information. The attack requires physical access but can be exploited by individuals with hardware access.
Recommendation
Immediately update GRUB2 to a version containing the fix for CVE-2023-4693. If updating is not possible, restrict physical access to systems and avoid mounting untrusted NTFS images.
Original NVD description (English source)
An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting a high Confidentiality risk.