Cyber Resilience

CVE-2024-29971

Critical

Published: 10 January 2025

Published
10 January 2025
Modified
29 October 2025
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0040 61.1th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-29971 is a critical-severity an unspecified weakness vulnerability in Scontain Scone. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked in the top 38.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2024-29971 is an interface vulnerability in Scontain SCONE version 5.8.0 that leads to state corruption via injected signals. The vulnerability affects the SCONE software component developed by Scontain, with the CVE published on 2025-01-10. It is classified under CWE-Other and carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), marking it as critical severity.

Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low complexity. By injecting signals, attackers can corrupt the internal state of SCONE instances, resulting in high impacts to confidentiality, integrity, and availability.

Mitigation details and further information are available in the referenced advisories, including a proof-of-concept at https://github.com/ahoi-attacks/sigy/blob/main/pocs/scone/cve.md and the vendor site at https://scontain.com.

EU & UK References

Vulnerability details

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.

CWE(s)
NVD-CWE-Other

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
T1211 Exploitation for Stealth Stealth
Adversaries may exploit vulnerabilities to evade detection by hiding activity, suppressing logging, or operating within trusted or unmonitored components.
attack.mitre.org →
Why these techniques?

Vulnerability enables state corruption via injected signals in SCONE (confidential computing platform), facilitating exploitation for privilege escalation (T1068) and defense evasion by subverting enclave protections (T1211).

MITRE ATLAS TechniquesAI

MITRE ATLAS techniques

AML.T0048: External Harms

Affected Assets

scontain
scone
5.8.0, 5.9.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-2 Flaw Remediation good match
prevent

Directly mitigates CVE-2024-29971 by requiring timely patching or upgrading of vulnerable SCONE 5.8.0 to remediate the interface flaw.

SI-10 Information Input Validation partial match
prevent

Addresses the interface vulnerability by validating injected signals as information inputs to prevent state corruption in SCONE.

SI-11 Error Handling partial match
prevent

Prevents state corruption by requiring secure error handling for malformed or injected signals in the SCONE interface.

References