CVE-2024-25565CWE-691

Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via…

Medium · published November 13, 2024

CVSS v4.0
4.8
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via local access.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-691 · Insufficient Control Flow Management
Published
2024-11-13T20:36Z
EPSS history
Timeline
  • 13 NOV 20:36Z
    Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via…
    cvelistv5