PT-2024-7675 · Intel · Intel Raid Web Console

Alexander Gutkin · Published 2024-09-16 · Updated 2024-10-09 · CVE-2024-34545

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) RAID Web Console versions all versions

Description The issue is related to insufficient input validation in the Intel(R) RAID Web Console software, which may allow an authenticated user to potentially enable information disclosure via adjacent access. This could permit a remote attacker to disclose protected information.

Recommendations For all versions of Intel(R) RAID Web Console software, patch the software immediately and monitor for signs of compromise. Limit network access if needed. As a temporary workaround, consider restricting access to sensitive data and functions within the web console until a patch is applied.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-09121

CVE-2024-34545

Affected Products

Intel Raid Web Console

References · 8

• https://bdu.fstec.ru/vul/2024-09121 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-34545 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1835759125134762042 · Twitter Post
• https://t.me/cvedetector/5735 · Telegram Post
• https://twitter.com/oktsec/status/1835759145682600144 · Twitter Post
• https://t.me/cvenotify/95651 · Telegram Post
• https://twitter.com/CVEnew/status/1835724284029014151 · Twitter Post