Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.
Advisories
Source ID Title
EUVD EUVD EUVD-2024-38124 Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 19 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Intel server Board M70klp2sb
Intel server Board M70klp2sb Firmware
CPEs cpe:2.3:h:intel:server_board_m70klp2sb:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:server_board_m70klp2sb_firmware:*:*:*:*:*:*:*:*
Vendors & Products Intel server Board M70klp2sb
Intel server Board M70klp2sb Firmware

Thu, 14 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Intel
Intel m70klp Firmware
CPEs cpe:2.3:o:intel:m70klp_firmware:*:*:*:*:*:*:*:*
Vendors & Products Intel
Intel m70klp Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 13 Nov 2024 21:15:00 +0000

Type Values Removed Values Added
Description Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.
Weaknesses CWE-284
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: intel

Published:

Updated: 2024-11-14T19:41:42.256Z

Reserved: 2024-08-01T03:00:08.492Z

Link: CVE-2024-39609

cve-icon Vulnrichment

Updated: 2024-11-14T16:11:30.599Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-13T21:15:27.197

Modified: 2024-11-19T19:58:29.653

Link: CVE-2024-39609

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.