CVE-2024-32666

EPSS 0.03%
Published 16.09.2024 17:16:05
Last modified 23.09.2024 14:47:22
Source secure@intel.com
Teams watchlist Login
Open Login

NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Raid Web Console

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.061

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
secure@intel.com	4.7	1	3.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-32666

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-32666

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-32666

EUVD