Skip to main content

Server Board S2600St Firmware CVE-2024-28947

HIGH
Improper Input Validation (CWE-20)
2024-08-14 secure@intel.com
Privilege Escalation Intel Server Board S2600St Firmware
7.1
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
7.1 HIGH
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (intel) · only source for this CVE.

CVSS VectorVendor: intel

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

1
CVE Published
Aug 14, 2024 - 14:15 cve.org
HIGH 7.1

DescriptionCVE.org

Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Server Board S2600St Firmware. Version information: version 02.01.0017.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Server Board S2600St Firmware

View all
CVE-2020-8732 HIGH
8.8 Aug 13

Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before ve
CVE-2020-8731 HIGH
8.8 Aug 13

Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute

CVE-2020-8730 HIGH
8.8 Aug 13

Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an
CVE-2020-8718 HIGH
8.8 Aug 13

Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m
CVE-2020-8713 HIGH
8.8 Aug 13

Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo
CVE-2020-8709 HIGH
8.8 Aug 13

Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before ve
CVE-2020-8708 HIGH
8.8 Aug 13

Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo
CVE-2020-8707 HIGH
8.8 Aug 13

Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may al
CVE-2020-8706 HIGH
8.8 Aug 13

Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may

CVE-2020-8722 HIGH
8.2 Aug 13

Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 m
CVE-2020-8721 HIGH
8.2 Aug 13

Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may al
CVE-2020-8719 HIGH
8.2 Aug 13

Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2024-28947 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy