CVE-2024-22005

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-220065.3OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.CVE-2024-220076.2In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disCVE-2024-220087.8In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatCVE-2024-220097.1In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2024-22014.7A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak CVE-2024-220105.5In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dCVE-2024-220117.5In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead CVE-2024-220127.8there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eCVE-2024-220135.3U-Boot environment is read from unauthenticated partition.CVE-2024-220148.8An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via SymbolCVE-2024-220156.5Improper input validation for some Intel(R) DLB driver software before version 8.5.0 may allow an authenticated user to potentially denial oCVE-2024-220167.8In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may