This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Multiple vulnerabilities in Intel processors and UEFI firmware

Intel has released a security advisory addressing several vulnerabilities in the hardware [1][2] and UEFI firmware of some processors [3]. If exploited, these vulnerabilities could allow privileged users to escalate their privileges, cause a denial of service or disclose sensitive information. A wide range of Intel processors is vulnerable, including: Intel Xeon D and E families Intel Core 10th, 11th and 12th generation Intel Atom Intel Pentium and Celeron The first two vulnerabilities, relating to hardware, are fixed by microcode-20240910 [4]; to fix the following ones and many others, users must wait for UEFI firmware updates from computer manufacturers. Lenovo users can already download fixes from the support site with specific instructions [5].

Intel processor - information disclosure (CVE-2024-23984)
CVSS 5.3 (Medium)

Allows an authenticated local attacker to potentially disclose sensitive information due to a security flaw in the RAPL (Running Average Power Limit) interface [1].

CVSS: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

More information:

The vulnerability was publicly disclosed 10. 9. 2024.

Intel processor - denial of service (CVE-2024-24968)
CVSS 5.3 (Medium)

Allows an authenticated local attacker to carry out a DoS attack due to an improper implementation of finite state machines in hardware logic [2].

CVSS: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

More information:

The vulnerability was publicly disclosed 10. 9. 2024.

UEFI firmware - denial of service (CVE-2024-23599)
CVSS 7.9 (High)

Allows an authenticated local attacker to carry out a DoS attack due to a race condition [3].

The vulnerability is present in product:

  • ;

CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

More information:

  • CVE-2024-23599 at cve.org, NVD
  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') at cwe.mitre.org

The vulnerability was publicly disclosed 10. 9. 2024.

UEFI firmware - privilege escalation (CVE-2024-21871)
CVSS 7.5 (High)

Allows an authenticated local attacker to escalate privileges due to improper input validation [3].

CVSS: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 10. 9. 2024.

UEFI firmware - privilege escalation (CVE-2023-42772)
CVSS 8.2 (High)

Allows an authenticated local attacker to escalate privileges on some reference processors due to an untrusted pointer dereference [3].

CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 10. 9. 2024.

UEFI firmware - privilege escalation (CVE-2024-21829)
CVSS 7.5 (High)

Allows an authenticated local attacker to escalate privileges due to improper input validation during error handling [3].

CVSS: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 10. 9. 2024.

UEFI firmware - information disclosure, denial of service (CVE-2024-21781)
CVSS 7.2 (High)

Allows an authenticated local attacker to access information or carry out a DoS attack [3].

CVSS: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:H

More information:

The vulnerability was publicly disclosed 10. 9. 2024.

By CESNET, z.s.p.o. Michaela Jarošová on 16. 9. 2024.

CESNET, z.s.p.o. Logo