PT-2025-6671 · Intel · Intel Dsa

Sim0Nsecurity · Published 2025-02-11 · Updated 2025-02-12 · CVE-2024-39805

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) DSA software versions prior to 23.4.39

Description The issue is related to insufficient verification of data authenticity in some Intel(R) DSA software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 23.4.39, update to version 23.4.39 or later to resolve the issue.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2025-01762

CVE-2024-39805

Affected Products

Intel Dsa

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-39805 · Security Note
• https://bdu.fstec.ru/vul/2025-01762 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01030.html · Note
• https://twitter.com/CVEnew/status/1889794197982683475 · Twitter Post