Is CVE-2023-28468 actively exploited?

No active exploitation of CVE-2023-28468 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-28468 be exploited remotely?

No. CVE-2023-28468 requires local access to exploit.

What is the CVSS score of CVE-2023-28468?

CVE-2023-28468 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2023-28468

MEDIUM

CVE-2023-28468

CWE-863Published: August 3, 2023· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS.

NVD Source

Technical Analysis

CVE-2023-28468 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 6.5.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.