Cyber Resilience

CVE-2024-24580

Medium

Published: 14 August 2024

Published
14 August 2024
Modified
23 August 2024
KEV Added
—
Patch
—
CVSS Score v4 6.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0013 32.1th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-24580 is a medium-severity DEPRECATED: Improper Sanitization of Custom Special Characters (CWE-92) vulnerability in Intel Data Center Gpu Max 1100 Firmware. Its CVSS base score is 6.8 (Medium).

Operationally, ranked at the 32.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access.

CWE(s)
CWE-92NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

intel
data center gpu max 1100 firmware
all versions
intel
data center gpu max 1550 firmware
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References