CVE-2024-25565

LOW

Intel Xeon Processors - Authenticated Denial of Service via UEFI Firmware Control Flow

Title source: llm
STIX 2.1

Description

Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via local access.

References (1)

Core 1

Scores

CVSS v3 3.8
EPSS 0.0017
EPSS Percentile 7.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-691
Status published
Products (1)
n/a/Intel(R) Xeon(R) Processors See references
Published Nov 13, 2024
Tracked Since Feb 18, 2026