CVE-2024-34543

EPSS 0.02%
Published 16.09.2024 17:16:06
Last modified 23.09.2024 14:17:42
Source secure@intel.com
Teams watchlist Login
Open Login

Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Raid Web Console

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.046

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@intel.com	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-34543

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-34543

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-34543

EUVD