CISA-2024-29214 — Vulnetix

CISA-2024-29214 PUBLISHED CVSS 8.7 HIGH

Reported by intel · Published February 12, 2025

Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Risk Scores

CVSS 4.0

8.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected Products

Vendor	Product	Versions
n/a	Intel(R) Processors	See references
n/a	Intel(R) Processors	See references, See references

Timeline

Feb 12, 2025 CVE Published
Nov 3, 2025 CVE Updated

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html url

Open in Interactive Console →