CVE-2024-29980

Summary

CVE-2024-29980 is a newly disclosed Input Data Manipulation vulnerability that affects the Phoenix SecureCore™ for Intel processors, including Kaby Lake, Coffee Lake, Comet Lake, and Ice Lake. Specifically, this vulnerability, which is classified as an Improper Check for Unusual or Exceptional Conditions issue, allows attackers to manipulate input data, potentially leading to unintended or unauthorized actions. Affected versions of Phoenix SecureCore™ for Intel Kaby Lake are before 4.0.1.1012, for Coffee Lake are before 4.1.0.568, for Comet Lake are before 4.2.1.292, and for Ice Lake are before 4.2.0.334. It is crucial for organizations using these processors to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.