CVE-2023-39539: Failure when uploading a Logo image file
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39539?
CVE-2023-39539 has a significant severity as it can lead to a loss of Confidentiality, Integrity, and Availability.
How do I fix CVE-2023-39539?
To mitigate CVE-2023-39539, update the AMI Aptio V BIOS to the latest version provided by the vendor.
Who is affected by CVE-2023-39539?
CVE-2023-39539 affects users of AMI Aptio V BIOS versions that allow unrestricted upload of PNG logo files.
What could an attacker do by exploiting CVE-2023-39539?
An attacker exploiting CVE-2023-39539 could potentially upload dangerous PNG files leading to unauthorized access and system compromise.
Is local access required to exploit CVE-2023-39539?
Yes, local access is required to exploit CVE-2023-39539, as it involves uploading a file to the BIOS.