CVE-2023-45237 (published 2024-01-16T16:11:11.556Z)
 
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
 vulnerability can be exploited by an attacker to gain unauthorized 
access and potentially lead to a loss of Confidentiality.




Affected products: Vendor: TianoCore
Product: edk2
Versions: edk2-stable202308