Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-36293

Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.

VectorLOCAL

PublishedFeb 12, 2025, 22:15

Published Bysecure@intel.com

Base Score

Score6.8

Affected Versions

No affected versions found.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html
https://www.dell.com/support/kbdoc/en-us/000283897/dsa-2025-041-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-1-ipu

Weakness Type

CWE-284

CVSS Metrics

Base Score

6.8

Vector String

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Base SeverityMedium

Version

4.0

Attack Vector (AV)

LOCAL