Medium severity · published Nov 13, 2024
CVE-2024-34167
Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable…
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Intel(R) Server Board S2600ST Family BIOS and Firmware Update software ·
all versions · source: vendor
SB
Server Board S2600st Firmware · Intel
0 · source: CISA
Affected product
IS
Intel(R) Server Board S2600ST Family BIOS and Firmware Update software
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-34167
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-34167
www.intel.com
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01183.html
More from Intel(R) Server Board S2600ST Family BIOS and Firmware Update software
8.2
CVE-2024-36282
Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation…