Lucene search

K
cvelistIntelCVELIST:CVE-2024-21864
HistoryMay 16, 2024 - 8:47 p.m.

CVE-2024-21864

2024-05-1620:47:07
CWE-86
intel
www.cve.org
4
improper neutralization
intel arc
iris xe graphics
privilege escalation
adjacent network access

CVSS3

7.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H

EPSS

0

Percentile

9.0%

Improper neutralization in some Intelยฎ Arcโ„ข & Irisยฎ Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Arc(TM) & Iris(R) Xe Graphics software",
    "versions": [
      {
        "version": "before version 31.0.101.5081",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

7.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:H

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-21864