Escalation of Privilege Vulnerability in Intel Xeon Processor Configurations
CVE-2024-21820

8.5HIGH

What is CVE-2024-21820?

Incorrect default permissions in certain Intel Xeon processor memory controller configurations pose a risk during Intel SGX operations. This vulnerability may allow a privileged user to escalate privileges via local access, potentially compromising system integrity. Users are advised to review their configurations and apply safeguards to mitigate this risk.

Affected Version(s)

Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX See references

References

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

.