Intel Xeon UEFI Firmware Vulnerability CVE-2024-25565

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Scope of Impact: Certain Intel Xeon processors may have a security vulnerability in their UEFI firmware, allowing unauthorized users with local access to cause service disruption. - Severity: Low (LOW). - CVE ID: CVE-2024-25565. - CVSS Score: - CVSS 3.1: 3.8 (Low) - CVSS 4.0: 4.8 (Medium) 2. Affected Products: - 4th and 5th generation Intel Xeon Scalable processors, including specific models: - 806F7 - 806F8 - C06F2 3. Recommended Actions: - Users should update to the latest firmware version provided by their system manufacturer to resolve these issues. 4. Disclosure Information: - The vulnerability was discovered by an Intel internal employee. - Intel follows coordinated disclosure practices, typically disclosing security vulnerabilities only after remediation measures are available. 5. Legal Notices and Disclaimers: - Intel provides materials "as is" without any express or implied warranties. - Intel products and services may contain known errata, which could cause products to deviate from specifications. - Intel products may no longer receive functional or security updates, depending on their end-of-life update status. - Features and benefits of Intel technologies depend on system configuration and may require enabling hardware, software, or service activation. - Performance varies by system configuration; no product or component can be absolutely secure. - Results provided by Intel may be based on internal analysis, architectural simulation, or modeling, and are for reference only. 6. Reporting Vulnerabilities: - If you have information about security issues or vulnerabilities related to Intel-branded products or technologies, please email secure@intel.com. - Provide as much information as possible, including affected products and versions, detailed vulnerability descriptions, and known exploit information. 7. Product Support: - For questions about Intel product security features, technical support, or product updates/patches, please visit the Support & Downloads page. This information provides a detailed description of the vulnerability, affected products, recommended actions, and guidance on how to report vulnerabilities and obtain product support.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Xeon UEFI Firmware Vulnerability CVE-2024-25565