CVE-2024-39279

Medium

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially…

intel·CWE-1220·Published 2025-02-12

CVSS

6.5

EPSS

0.00

KEV

Exploits

cve.orgen

176 chars

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

NVDen

176 chars

Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.

La granularidad insuficiente del control de acceso en el firmware UEFI en algunos procesadores Intel(R) puede permitir que un usuario autenticado potencialmente habilite la denegación de servicio a través del acceso local.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
3.1	Secondary	NVD	6.5	2.0	4.0	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
4.0	Primary	cve.org	6.8	—	—	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
4.0	Secondary	NVD	6.8	—	—	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X