CVE-2024-24853

highPriorität · verfolgen · 0EPSS 0.002 · 13. PerzentilDEEURU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.23% (13th) EPSS

CVSS 7.2 · high

Is it mine?

47 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-21

Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-150200.62.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-158.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-158.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenmicrocode_ctl-0:1.17-102.83.90.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-1.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenucode-intel-0:20260210-160000.1.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.1–7.3

v3.17.2highAV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.2highCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · secure@intel.comAusnutzbarkeit 0.6 · Auswirkung 6

v3.17.2highCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · SUSE Product Security

v4.07.3highCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:Hsecondary · ENISA EU

v4.07.3highCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · secure@intel.com

v4.04.1mediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-696USCWE-696US

betroffene Produkte (47)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Dell Avamar Gen5a <Hotfix 338868alle Versionencert_bundDE
Dell BIOSalle Versionencert_bundDEcpe:/h:dell:bios:-
Dell PowerScale <12.4.1alle Versionencert_bundDE
HP Computer SimpliVity Serveralle Versionencert_bundDEcpe:/h:hp:computer:simplivity_server
HPE ProLiantalle Versionencert_bundDEcpe:/h:hp:proliant:-
HPE ProLiant Alletra 4140 <2.16_03-01-2024alle Versionencert_bundDE
HPE ProLiant BIOS <2.10_11-28-2023alle Versionencert_bundDE
HPE ProLiant BIOS <2.20_08-07-2024alle Versionencert_bundDE
HPE Synergy 480 Gen11 Compute Module <2.10_11-28-2023alle Versionencert_bundDE
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
Dell Avamar≤ Gen5a <Hotfix 338868cert_bundDE
Dell PowerScale OneFS< 12.4.1cert_bundDE
HPE ProLiant≤ BIOS <2.10_11-28-2023cert_bundDE
HPE ProLiant≤ Alletra 4140 <2.16_03-01-2024cert_bundDE
HPE ProLiant≤ BIOS <2.20_08-07-2024cert_bundDE
HPE Synergy≤ 480 Gen11 Compute Module <2.10_11-28-2023cert_bundDE
n/a Intel(R) Processor≤ See referencesenisa_euvdEU
Intel Corp. 10th Generation Intel Core Processor Familyalle Versionenfstec_bduRU
Intel Corp. 11th Generation Intel Core Processor Familyalle Versionenfstec_bduRU

20 von 47 angezeigt

Advisories (9)

Hersteller- und Ökosystem-Meldungen dazu.

SUSE-SU-2026:0668-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:0669-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:0670-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20522-1Security update for ucode-intel2026-02-26csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20682-1Security update for ucode-intel2026-03-06csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20758-1Security update for ucode-intel2026-03-19csaf · suse_csafDE
Security update for ucode-intel
SUSE-SU-2026:20941-1Security update for ucode-intel2026-03-19csaf · suse_csafDE
Security update for ucode-intel
WID-SEC-W-2024-1842HPE ProLiant undSynergy: Mehrere Schwachstellen ermöglichen PrivilegieneskalationDeutsch2024-08-13csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in HPE ProLiant und HPE Synergy ausnutzen, um seine Privilegien zu erhöhen.
openSUSE-SU-2026:20401-1Security update for ucode-intel2026-03-19csaf · suse_csafDE
Security update for ucode-intel

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund suse_csaf NVD CVE.org MITRE

veröffentlicht 2024-08-14geändert 2026-06-17

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan