← Back

CVE-2022-24379

nvd nist
Published: Nov 14, 2023Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (2)

Intel
2 products
Server Board M70klp2sb Firmware
Server System M70klp4s2uhh Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Server Board M70klp2sb Firmware
Before 01.04.0022
Running on/withPlatform Versions
Intel
Server Board M70klp2sb
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Server System M70klp4s2uhh Firmware
Before 01.04.0022
Running on/withPlatform Versions
Intel
Server System M70klp4s2uhh
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.