Privilege Escalation Vulnerability in Intel UEFI Firmware for Server D50DNP Products

CVE-2024-23487

What is CVE-2024-23487?

A vulnerability exists in the UserAuthenticationSmm driver within the UEFI firmware of certain Intel® Server D50DNP Family products. This flaw stems from improper input validation, potentially allowing a privileged user with local access to execute actions that could escalate their privileges within the system. Exploiting this vulnerability may grant unauthorized control over critical system functionalities, jeopardizing the security posture of the affected systems. Users and administrators are urged to apply recommended patches and updates to mitigate the risks associated with this identified vulnerability.

References