Lucene search
HistoryMay 16, 2024 - 9:16 p.m.
CVE-2024-22095
platformvariableinitdxe
input validation
uefi firmware
intel server d50dnp family
privilege escalation
local access
7.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel® Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access.
Related
cvelist
cvelist
CVE-2024-22095
2024-05-16 20:47:00
cve
cve
CVE-2024-22095
2024-05-16 21:16:06
vulnrichment
vulnrichment
CVE-2024-22095
2024-05-16 20:47:00
7.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-22095