CVE-2024-0762highCWE-120

CVE-2024-0762: falha de alta gravidade em Phoenix SecureCore™ for Intel Kaby Lake

Potential buffer overflow when handling UEFI variables

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SecureCore™ for Intel Coffee Lake+ Monitorar SecureCore™ for Intel Comet Lake

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562; Phoenix SecureCore™ for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323; Phoenix SecureCore™ for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287; Phoenix SecureCore™ for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236; Phoenix SecureCore™ for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184; Phoenix SecureCore™ for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269; Phoenix SecureCore™ for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218; Phoenix SecureCore™ for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Phoenix · SecureCore™ for Intel Alder LakePhoenix · SecureCore™ for Intel Coffee LakePhoenix · SecureCore™ for Intel Comet LakePhoenix · SecureCore™ for Intel Ice LakePhoenix · SecureCore™ for Intel Jasper LakePhoenix · SecureCore™ for Intel Kaby LakePhoenix · SecureCore™ for Intel Meteor LakePhoenix · SecureCore™ for Intel Raptor LakePhoenix · SecureCore™ for Intel Tiger Lake
CVEs relacionadas — Phoenix SecureCore™ for Intel Kaby Lake

No mesmo produto, das mais perigosas para as menos.

CVE-2024-29979MEDIUMUnsafe Handling of Phoenix UEFI VariablesEPSS 0.2%CVE-2024-29980MEDIUMUnsafe Handling of IHV UEFI VariablesEPSS 0.1%