Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to potentially enable escalation of privilege via local access.

VectorLOCAL

PublishedFeb 12, 2025, 22:15

Published Bysecure@intel.com

Base Score

Score8.7

Affected Versions

No affected versions found.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html

Weakness Type

CWE-20

CVSS Metrics

Base Score

8.7

Vector String

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Base SeverityHigh

Version

4.0

Attack Vector (AV)

LOCAL