Privilege Escalation Vulnerability in UEFI Firmware for Intel Server M50FCP Family

CVE-2024-24981

What is CVE-2024-24981?

A security flaw has been identified in the PfrSmiUpdateFw driver within the UEFI firmware of the Intel Server M50FCP Family products. This vulnerability stems from inadequate input validation, potentially allowing a privileged user to exploit local access for privilege escalation. Administrators of affected systems are advised to apply relevant patches or mitigations to safeguard against potential attacks that leverage this flaw.

References