EV
Product
Edge Virtualization Engine
5
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 0Low 0
Watch
Add Edge Virtualization Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43632 | 9.9 | Sep 21 | As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients Affected: 3.0.0 before 9.5.0 |
| CVE-2023-43631 | 8.8 | Sep 21 | On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys” Affected: before 8.6.0; 9.0.0 before 9.5.0 |
| CVE-2023-43636 | 8.8 | Sep 20 | In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault Affected: before 8.6.0; 9.0.0 before 9.5.0 |
| CVE-2023-43635 | 8.8 | Sep 20 | Vault Key Sealed With SHA1 PCRs The measured boot solution implemented in EVE OS leans on a PCR locking mechanism Affected: before 9.5.0 |
| CVE-2023-43630 | 8.8 | Sep 20 | PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this… Affected: 9.0.0 before 9.5.0 |
Showing 5