PT-2024-8807 · Intel · Intel Server M20Ntp Bios

Yngweijw · Published 2024-11-12 · Updated 2024-11-15 · CVE-2024-40885

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: Intel(R) Server M20NTP BIOS (affected versions not specified)

Description: The issue is related to a use after free vulnerability in the UEFI firmware of some Intel(R) Server M20NTP BIOS, which may allow a privileged user to potentially enable escalation of privilege via local access. This could potentially be exploited by a local attacker to gain elevated privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-10439

CVE-2024-40885

Affected Products

Intel Server M20Ntp Bios

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-40885 · Security Note
• https://bdu.fstec.ru/vul/2024-10439 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html · Note
• https://t.me/cvedetector/10887 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1857023236292100603 · Twitter Post
• https://twitter.com/CVEnew/status/1856808191017062705 · Twitter Post
• https://twitter.com/CveFindCom/status/1856827388325167527 · Twitter Post