SecuriTricks - CVE-2024-29979

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334.

Product(s) Impacted

Product	Versions
Phoenix SecureCore for Intel Kaby Lake	['before 4.0.1.1012']
Phoenix SecureCore for Intel Coffee Lake	['before 4.1.0.568']
Phoenix SecureCore for Intel Comet Lake	['before 4.2.1.292']
Phoenix SecureCore for Intel Ice Lake	['before 4.2.0.334']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References

https://www.phoenix.com/phoenix-security-notifications/cve-2024-29979/

CVSS Score

2.3 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: HIGH
Scope: UNCHANGED
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

View Vector String

Timeline

Published: Jan. 14, 2025, 4:15 p.m.
Last Modified: Jan. 14, 2025, 4:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de

CVE-2024-29979