Lucene search
HistoryAug 14, 2024 - 2:15 p.m.
CVE-2024-28947
cve-2024-28947
input validation
kernel mode driver
intel server board s2600st
firmware
escalation of privilege
local access
CVSS3
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Improper input validation in kernel mode driver for some Intel® Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected configurations
Node
intelserver_board_s2600st_firmwareRange<02.01.0017
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | server_board_s2600st_firmware | * | cpe:2.3:o:intel:server_board_s2600st_firmware:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-28947
2024-08-14 13:45:20
vulnrichment
vulnrichment
CVE-2024-28947
2024-08-14 13:45:20
cve
cve
CVE-2024-28947
2024-08-14 14:15:26
CVSS3
8.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2024-28947