CVE-2024-24582

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 12, 2025
CWE ID 20

Summary

CVE-2024-24582 is a vulnerability affecting the XmlCli feature in certain UEFI firmware for Intel(R) processors. The issue involves inadequate input validation, granting a privileged user the potential ability to escalate their privileges through local access. This could result in significant security risks if exploited successfully. It is essential for Intel to release a patch to mitigate this vulnerability and prevent potential attacks. Users should apply the patch as soon as it becomes available to maintain the security of their systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share