CVE-2024-39285

CVE-2024-39285 describes improper access control in UEFI firmware affecting Intel Server Board families such as M70KLP, M20NTP, M10JNP2SB, and S2600BP(S). The root cause is an access control weakness in the UEFI firmware that may allow a privileged local attacker to disclose sensitive information...

CVE-2024-39285

Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39609

CVE-2024-39609 concerns improper access control in the UEFI firmware of Intel Server Board M70KLP (and related Intel Server Boards). The Red Hat and Intel advisories identify the root cause as improper access control in UEFI, enabling a privileged user to potentially escalate privileges via local...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39811

CVE-2024-39811 affects Intel Server M20NTP Family UEFI firmware. The root cause is improper input validation in the UEFI firmware, which may allow a privileged user to escalate privileges via local access. The vulnerability is documented with local attack vector and high-impact CVSS metrics (3.1:...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-40885

CVE-2024-40885 concerns use-after-free in the UEFI firmware of Intel Server M20NTP BIOS. The vulnerability, exploitable via local access with high privileges, could enable privilege escalation. Intel’s advisories and related entries (Intel SA-01175 and vendor security pages) indicate affected Int...

CVE-2024-40885

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-40885

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Summary: CVE-2024-41167 concerns improper input validation in the UEFI firmware of Intel Server Board M10JNP2SB Family, potentially allowing a locally privileged user to escalate privileges. The issue is documented within a broader Intel advisory tier that lists several related CVEs (e.g., CVE-20...

CVE-2024-31154

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31154

CVE-2024-31154 affects Intel Server Board S2600BPBR UEFI firmware (and related S2600BP family). It stems from improper input validation in the UEFI, which could allow a privileged local attacker to escalate privileges. Intel’s advisory (Intel-SA-01175) confirms the broader family impact and recom...

CVE-2024-31154

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31158

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31158

CVE-2024-31158 affects Intel Server Board S2600BP Family (and related variants S2600BPBR) where improper input validation in UEFI firmware may allow a privileged local user to escalate privileges. The issue is rooted in the UEFI firmware handling on these Intel server boards, with Intel documenti...

CVE-2024-31158

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...