PT-2024-7026 · Intel · Intel Csme

Igor Metric · Published 2024-08-13 · Updated 2024-08-18 · CVE-2024-21844

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Intel(R) CSME (affected versions not specified)

Description The issue is related to an integer overflow in the firmware of some Intel(R) CSME, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This could be exploited by a remote attacker to cause a denial of service. The vulnerability may be exploited through local network attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2024-08280

CVE-2024-21844

Affected Products

Intel Csme

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-21844 · Security Note
• https://bdu.fstec.ru/vul/2024-08280 · Security Note
• https://twitter.com/CVEnew/status/1823719124591051032 · Twitter Post
• https://twitter.com/oktsec/status/1825144180105994692 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html · Note
• https://security.netapp.com/advisory/ntap-20241108-0003 · Note