Lucene search

IntelCVE-2024-24580

HistoryAug 14, 2024 - 2:15 p.m.

CVE-2024-24580

2024-08-1414:15:21

CWE-92

intel

web.nvd.nist.gov

intel

data center gpu

denial of service

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CVSS4

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

Percentile

9.5%

JSON

Improper conditions check in some Intel® Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access.

Affected configurations

Nvd

Node

inteldata_center_gpu_max_1100_firmwareMatch-

AND

inteldata_center_gpu_max_1100Match-

Node

inteldata_center_gpu_max_1550_firmwareMatch-

AND

inteldata_center_gpu_max_1550Match-

VendorProductVersionCPE
inteldata_center_gpu_max_1100_firmware-cpe:2.3:o:intel:data_center_gpu_max_1100_firmware:-:*:*:*:*:*:*:*
inteldata_center_gpu_max_1100-cpe:2.3:h:intel:data_center_gpu_max_1100:-:*:*:*:*:*:*:*
inteldata_center_gpu_max_1550_firmware-cpe:2.3:o:intel:data_center_gpu_max_1550_firmware:-:*:*:*:*:*:*:*
inteldata_center_gpu_max_1550-cpe:2.3:h:intel:data_center_gpu_max_1550:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	data_center_gpu_max_1100_firmware	-	cpe:2.3:o:intel:data_center_gpu_max_1100_firmware:-:::::::*
intel	data_center_gpu_max_1100	-	cpe:2.3:h:intel:data_center_gpu_max_1100:-:::::::*
intel	data_center_gpu_max_1550_firmware	-	cpe:2.3:o:intel:data_center_gpu_max_1550_firmware:-:::::::*
intel	data_center_gpu_max_1550	-	cpe:2.3:h:intel:data_center_gpu_max_1550:-:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Data Center GPU Max Series 1100 and 1550 products",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01094.html

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CVSS4

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-24580