Race Condition Vulnerability in Intel System Security Report Firmware
CVE-2024-36262

8.6HIGH

Key Information:

Vendor

Intel
Status
Intel(r) System Security Report And System Resources Defense Firmware
Vendor
CVE Published:
12 February 2025

What is CVE-2024-36262?

A race condition exists in the Intel System Security Report and System Resources Defense firmware that may allow a privileged user to exploit local access vulnerabilities. This flaw can potentially enable an escalation of privilege, posing a risk to the integrity of affected systems. Users are advised to assess their systems and apply any available patches to mitigate the risk associated with this vulnerability.

Affected Version(s)

Intel(R) System Security Report and System Resources Defense firmware See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.