Edge Virtualization Engine
Vendor:
First CVE: Sep 20, 2023 · Active for 2 years
5
Total CVEs
More Total CVEs than 77% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
9.0
Avg CVSS
Higher Avg CVSS than 83% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Edge Virtualization Engine over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 20, 2023
2 years ago
Most Recent CVE
Sep 21, 2023
1,037 days ago
CVE Severity & Scoring
Edge Virtualization Engine5 CVEs
80%
20%
All CVEs352,231 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local4 (80.0%)
Network1 (20.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low5 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-43632CRITICAL
As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port
8877 in EVE, exposing limited functionality of the TPM to the clients.
VTPM allows cl | Sep 21, 2023 | 9.9 | 30 | NO | NO |
CVE-2023-43635HIGH
Vault Key Sealed With SHA1 PCRs
The measured boot solution implemented in EVE OS leans on a PCR locking mechanism.
Different parts of the system update different PCR values | Sep 20, 2023 | 8.8 | 26 | NO | NO |
CVE-2023-43631HIGH
On boot, the Pillar eve container checks for the existence and content of
“/config/authorized_keys”.
If the file is present, and contains a supported public key, the container wi | Sep 21, 2023 | 8.8 | 25 | NO | NO |
CVE-2023-43630HIGH PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but
due to the change that was implemented in commit
“7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issu | Sep 20, 2023 | 8.8 | 25 | NO | NO |
CVE-2023-43636HIGH
In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing
the encrypted data located in the vault.
As per the “measured boot” design, the PCR values | Sep 20, 2023 | 8.8 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Edge Virtualization Engine
Top CWEs
Versions
No cataloged versions.