CVE-2024-11679CWE-125

An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated…

Medium · published April 11, 2025

CVSS v4.0
6.7
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated privileges to read the contents of memory.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-04-11T18:21Z
EPSS history
Timeline
  • 11 APR 18:21Z
    An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated…
    cvelistv5