CVE-2023-43634

CVE-2023-43634 affects lfedge eve and stems from an oversight where a critical configuration partition measurement was moved from PCR 13 to PCR 14, but PCR 14 was not subsequently included in the list of PCRs used to seal/unseal the "vault" key. This allows an attacker with local access to modify the config partition without detection, bypassing measured boot. The vulnerability has a CVSS score of 8.8 (High), indicating a high-impact attack with low complexity, potentially leading to full device control and access to encrypted data. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this CVE.