CVE-2023-45235

CVE-2023-45235 is a high-severity buffer overflow vulnerability in EDK2's Network Package, specifically affecting the tianocore edk2 implementation. It occurs when handling the Server ID option from a DHCPv6 proxy Advertise message. This vulnerability, with a CVSS score of 8.8, can be exploited by an unauthenticated attacker on the adjacent network to achieve a complete loss of confidentiality, integrity, and availability. While there is no public exploit code available (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.