Improper Input Validation in UEFI Firmware for Intel Server D50DNP Family Products
CVE-2024-22095

7.2HIGH

Key Information:

Vendor

Intel
Status
Uefi Firmware For Some Intel(r) Server D50dnp Family Products
Vendor
CVE Published:
16 May 2024

What is CVE-2024-22095?

The vulnerability identified relates to improper input validation in the PlatformVariableInitDxe driver within the UEFI firmware for certain Intel Server D50DNP Family products. This flaw could potentially allow a privileged user to escalate their privileges through local access, compromising the overall integrity and confidentiality of the affected systems. It is crucial for organizations using these products to assess their environment and implement necessary updates to mitigate this security risk.

Affected Version(s)

UEFI firmware for some Intel(R) Server D50DNP Family products See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.