Potential Escalation of Privilege Vulnerability in UEFI Firmware

CVE-2024-39609

6.7MEDIUM

Key Information

Vendor: Intel
Status: Server Board M70klp2sb Firmware
Vendor: CVE Published:; 13 November 2024

Summary

Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS V3.1

Score:

6.7

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Nov 13, 2024

Collectors

NVD Database