Lucene search

K
cve[email protected]CVE-2024-21864
HistoryMay 16, 2024 - 9:16 p.m.

CVE-2024-21864

2024-05-1621:16:05
CWE-86
web.nvd.nist.gov
32
cve-2024-21864
intel arc
iris xe graphics
privilege escalation
adjacent network access

7.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Improper neutralization in some Intelยฎ Arcโ„ข & Irisยฎ Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access.

Affected configurations

Vulners
Node
inteliris_xe_graphicsRange<31.0.101.5081

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Arc(TM) & Iris(R) Xe Graphics software",
    "versions": [
      {
        "version": "before version 31.0.101.5081",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

7.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-21864