CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
CVE-2023-48733- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1188
- Updated
- 2026-11-02
EUVDEUVD-2023-52766
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
EUVD-2023-52766- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cjc8-gmgf-qv2g
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
GHSA-cjc8-gmgf-qv2g- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1188
- Updated
- 2026-11-02
NVD
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
CVE-2023-48733- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1188
- Updated
- 2026-11-02
OSV
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
CVE-2023-48733- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
DEBIAN-CVE-2023-48733- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-48733
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
- Record
UBUNTU-CVE-2023-48733- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13807-1 No score
ovmf-202308-7.1 on GA media
These are all security issues fixed in the ovmf-202308-7.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13807-1- Updated
- 2026-11-02
OSVUSN-6638-1 No score
edk2 vulnerabilities
Marc Beatove discovered buffer overflows exit in EDK2. An attacker on the local network could potentially use this to impact availability or possibly cause remote code execution. (CVE-2022-36763, CVE-2022-36764, CVE-2022-36765)
It was discovered that a buffer overflows exists in EDK2's Network Package An attacker on the local network could potentially use these to impact availability or possibly cause remote code execution. (CVE-2023-45230, CVE-2023-45234, CVE-2023-45235)
It was discovered that an out-of-bounds read exists in EDK2's Network Package An attacker on the local network could potentially use this to impact confidentiality. (CVE-2023-45231)
It was discovered that infinite-loops exists in EDK2's Network Package An attacker on the local network could potentially use these to impact availability. (CVE-2023-45232, CVE-2023-45233)
Mate Kukri discovered that an insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. An attacker could use this to bypass Secure Boot. (CVE-2023-48733)
- Record
USN-6638-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
edk2Debian:12 |
before 2022.11-6+deb12u1, plus listed versions 2022.11-6 |
2022.11-6+deb12u1 |
edk2Debian:13 |
before 2023.11-7 | 2023.11-7 |
edk2Debian:14 |
before 2023.11-7 | 2023.11-7 |
edk2Debian:10 |
before 0~20181115.85588389-3+deb10u4, plus listed versions 0~20181115.85588389-30~20181115.85588389-3+deb10u10~20181115.85588389-3+deb10u20~20181115.85588389-3+deb10u3 |
0~20181115.85588389-3+deb10u4 |
edk2Debian:11 |
before 2020.11-2+deb11u2, plus listed versions 2020.11-22020.11-2+deb11u1 |
2020.11-2+deb11u2 |
edk2Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 0~20150106.5c2d456b-20~20160104.c2a892d7-10~20160408.ffea0a2c-20~20160408.ffea0a2c-2ubuntu0.10~20160408.ffea0a2c-2ubuntu0.20~20160408.ffea0a2c-2ubuntu0.2+esm10~20160408.ffea0a2c-2ubuntu0.2+esm30~20160408.ffea0a2c-2ubuntu0.2+esm4 |
None known |
edk2Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 0~20170911.5dfba97c-10~20171010.234dbcef-10~20171027.76fd5a66-10~20171205.a9212288-10~20180105.0bc94c74-1 Show 8 moreShow less0~20180205.c0d9813c-10~20180205.c0d9813c-20~20180205.c0d9813c-2ubuntu0.10~20180205.c0d9813c-2ubuntu0.20~20180205.c0d9813c-2ubuntu0.30~20180205.c0d9813c-2ubuntu0.3+esm10~20180205.c0d9813c-2ubuntu0.3+esm20~20180205.c0d9813c-2ubuntu0.3+esm3 |
None known |
edk2Ubuntu:20.04:LTS |
before 0~20191122.bd85bf54-2ubuntu3.5, plus listed versions 0~20190606.20d2e5a1-2ubuntu10~20190828.37eef910-30~20190828.37eef910-40~20191122.bd85bf54-10~20191122.bd85bf54-1ubuntu1 Show 8 moreShow less0~20191122.bd85bf54-20~20191122.bd85bf54-2ubuntu10~20191122.bd85bf54-2ubuntu20~20191122.bd85bf54-2ubuntu30~20191122.bd85bf54-2ubuntu3.10~20191122.bd85bf54-2ubuntu3.20~20191122.bd85bf54-2ubuntu3.30~20191122.bd85bf54-2ubuntu3.4 |
0~20191122.bd85bf54-2ubuntu3.5 |
edk2Ubuntu:22.04:LTS |
before 2022.02-3ubuntu0.22.04.2, plus listed versions 2021.08~rc0-22021.08-32021.11~rc1-12021.11-12021.11-2 Show 6 moreShow less2022.02~rc1-12022.02~rc1-1ubuntu12022.02-12022.02-22022.02-32022.02-3ubuntu0.22.04.1 |
2022.02-3ubuntu0.22.04.2 |
edk2Ubuntu:20.04:LTS From an advisory covering 10 CVEs |
before 0~20191122.bd85bf54-2ubuntu3.5, plus listed versions 0~20190606.20d2e5a1-2ubuntu10~20190828.37eef910-30~20190828.37eef910-40~20191122.bd85bf54-10~20191122.bd85bf54-1ubuntu1 Show 8 moreShow less0~20191122.bd85bf54-20~20191122.bd85bf54-2ubuntu10~20191122.bd85bf54-2ubuntu20~20191122.bd85bf54-2ubuntu30~20191122.bd85bf54-2ubuntu3.10~20191122.bd85bf54-2ubuntu3.20~20191122.bd85bf54-2ubuntu3.30~20191122.bd85bf54-2ubuntu3.4 |
0~20191122.bd85bf54-2ubuntu3.5 |
edk2Ubuntu:22.04:LTS From an advisory covering 10 CVEs |
before 2022.02-3ubuntu0.22.04.2, plus listed versions 2021.08~rc0-22021.08-32021.11~rc1-12021.11-12021.11-2 Show 6 moreShow less2022.02~rc1-12022.02~rc1-1ubuntu12022.02-12022.02-22022.02-32022.02-3ubuntu0.22.04.1 |
2022.02-3ubuntu0.22.04.2 |
ovmfopenSUSE:Tumbleweed |
before 202308-7.1 | 202308-7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-48733 is a medium vulnerability (CVSS 6.7) in Tianocore Edk2, published February 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in edk2 2022.11-6+deb12u1.
References
bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137
nvd.nist.gov/vuln/detail/CVE-2023-48733
openwall.com/lists/oss-security/2024/02/14/4
lists.debian.org/debian-lts-announce/2024/06/msg00028.html
github.com/advisories/GHSA-cjc8-gmgf-qv2g
Show 15 moreShow less
security-tracker.debian.org/tracker/CVE-2023-48733
ubuntu.com/security/CVE-2023-48733
cve.org/CVERecord?id=CVE-2023-48733
suse.com/security/cve/CVE-2023-48733