CVE-2024-23980 - Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access

Back Back to CVE browser

HIGH

Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access

Published May 16, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.18%

Description

Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access.

Affected products

Vendor n/a Product UEFI firmware for some Intel(R) Server D50FCP Family products Default
unaffected
- Version
  See references
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

UEFI firmware for some Intel(R) Server D50FCP Family products

unaffected

Version	Status	Constraints
See references	affected	-

Vendor Intel Product Server System D50tnp2mhsvac Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel

Server System D50tnp2mhsvac Firmware

n/a

Version	Status	Constraints
0	affected	<*

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21406		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.html