CVE-2024-25576CWE-284

improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local…

High · published August 14, 2024

CVSS v4.0
8.5
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local access.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
EPSS
0.00171 · 6.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-08-14T13:45Z
EPSS history
Timeline
  • 14 AUG 13:45Z
    improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local…
    cvelistv5