VDB
WID-SEC-W-2024-3047
WID-SEC-W-2024-3047
PUBLISHED
CVSS 8.699999809265137 HIGH
TianoCore EDK2 ist die Referenzimplementierung von UEFI von Intel.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell PowerScale OneFS 13.2.3 | ||
| Amazon Linux 2 | ||
| Insyde UEFI Firmware Kernel | ||
| NetApp FAS | ||
| Dell Computer | ||
| TianoCore EDK2 <202408 | ||
| RESF Rocky Linux | ||
| TianoCore EDK2 202408 | ||
| Ubuntu Linux | ||
| Dell PowerScale OneFS <13.2.3 | ||
| Dell PowerScale OneFS OneFS | ||
| Dell PowerEdge Server BIOS | ||
| Dell PowerEdge T40 | ||
| NetApp AFF | ||
| Oracle Linux | ||
| Debian Linux | ||
| Red Hat Enterprise Linux | ||
| Lenovo Computer | ||
| Dell Avamar |
Timeline
- Sep 29, 2024 CVE Published
- Mar 31, 2026 Distribution Patch
- Mar 31, 2026 Distribution Patch
- Mar 31, 2026 Distribution Patch
- Mar 31, 2026 Distribution Patch
- May 5, 2026 CVE Updated
- Jul 19, 2026 Distribution Patch
- Jul 19, 2026 Distribution Patch
- Jul 19, 2026 Distribution Patch
- Jul 19, 2026 Distribution Patch
- Jul 19, 2026 Distribution Patch
- Jul 19, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2024:9946 url
- https://access.redhat.com/errata/RHSA-2024:10268 url
- https://access.redhat.com/errata/RHSA-2024:11185 url
- https://access.redhat.com/errata/RHSA-2024:11219 url
- https://linux.oracle.com/errata/ELSA-2024-11185.html url
- https://linux.oracle.com/errata/ELSA-2024-11219.html url
- https://www.dell.com/support/kbdoc/de-de/000287202/dsa-2025-038-security-update-for-dell-poweredge-server-bios-for-tianocore-edk2-vulnerability url
- https://alas.aws.amazon.com/AL2/ALAS-2024-2722.html url
- https://www.dell.com/support/kbdoc/de-de/000362542/dsa-2025-339-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities url
- https://www.dell.com/support/kbdoc/de-de/000363693/dsa-2025-166-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities url
- https://ubuntu.com/security/notices/USN-7894-1 url
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3047.json advisory
- https://security.netapp.com/advisory/ntap-20241206-0006/ url
- https://www.dell.com/support/kbdoc/000287202 url
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3047 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-38796 url
- https://access.redhat.com/errata/RHSA-2024:11194 url
- https://www.insyde.com/security-pledge/sa-2024019/ url
- https://support.lenovo.com/us/en/product_security/LEN-197020 url
- https://www.dell.com/support/kbdoc/000335106 url
…and 9 more