Lucene search
HistoryAug 14, 2024 - 2:15 p.m.
CVE-2024-39283
incomplete filtering - intel tdx - privilege escalation - local access
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Incomplete filtering of special elements in Intel® TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
inteltdx_module_softwareRange<1.5.01.00.592
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | tdx_module_software | * | cpe:2.3:a:intel:tdx_module_software:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-39283
2024-08-14 14:15:27
cvelist
cvelist
CVE-2024-39283
2024-08-14 13:45:39
vulnrichment
vulnrichment
CVE-2024-39283
2024-08-14 13:45:39
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2024-39283