CVE-2024-36293mediumCWE-284

CVE-2024-36293: medium-severity vulnerability in Intel(R) Processors with Intel(R) SGX

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.3%
exploitation probability
0.3%top 84% of all CVEs
observed exploitation
nono source reports it
Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
n/a · Intel(R) Processors with Intel(R) SGX
References
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.htmlhttps://lists.debian.org/debian-lts-announce/2025/03/msg00021.htmlhttps://www.dell.com/support/kbdoc/en-us/000283897/dsa-2025-041-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-1-ipu