6
CVE-2024-1298
- EPSS 0.03%
- Published 30.05.2024 21:15:09
- Last modified 07.03.2025 01:15:11
- Source infosec@edk2.groups.io
- Teams watchlist Login
- Open Login
EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendortianocore
≫
Product
edk2
Default Statusunaffected
Version <
edk2-stable202405
Version
0
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.062 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| infosec@edk2.groups.io | 6 | 1.5 | 4 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
|
CWE-369 Divide By Zero
The product divides a value by zero.