CVE-2024-36293

CVSS 6.8 MEDIUMEPSS 0.2%CWE-284

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 feb 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Productos afectados

n/a · Intel(R) Processors with Intel(R) SGX

Referencias

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html https://www.dell.com/support/kbdoc/en-us/000283897/dsa-2025-041-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-1-ipu