DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Intel Firmware: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-11-12
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Firmware ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41167US | medium6.7 | — | ||
Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access… | ||||
| CVE-2024-40885US | — | — | ||
Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-39811US | — | — | ||
Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-39609US | medium6.7 | — | ||
Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-39285US | — | — | ||
Improper access control in UEFI firmware in some Intel(R) Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access. | ||||
| CVE-2024-36282US | — | — | ||
Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of… | ||||
| CVE-2024-34167US | — | — | ||
Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalatio… | ||||
| CVE-2024-31158US | — | — | ||
Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-31154US | — | — | ||
Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access. | ||||
| CVE-2024-25565US | — | — | ||
Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via local access. | ||||
| CVE-2022-34301US | medium6.7OT erhöht | Exploit | ||
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- HP Security Bulletin HPSBHF04003 vom 2025-01-29external
- HPE Security Bulletin HPESBHF04735 vom 2024-11-12external
- HPE Security Bulletin vom 2024-12-11external
- WID-SEC-W-2024-3418 - CSAF Versionself
- WID-SEC-2024-3418 - Portal Versionself
- Dell Security Advisory DSA-2025-072 vom 2025-02-12external
- Dell Security Advisory DSA-2024-441 vom 2024-12-10external
- Intel Security Advisory INTEL-SA-01085 vom 2024-11-12external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan