CVE-2024-22013

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

U-Boot environment is read from unauthenticated partition.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Sep 16, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-220148.8An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via SymbolCVE-2024-220156.5Improper input validation for some Intel(R) DLB driver software before version 8.5.0 may allow an authenticated user to potentially denial oCVE-2024-220167.8In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may CVE-2024-220177.3setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to performCVE-2024-220182.9A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. CVE-2024-220197.5A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resourCVE-2024-22025.4The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versionsCVE-2024-220206.5A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can eCVE-2024-220214.3Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a ScoCVE-2024-220228.8Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash CVE-2024-220235.3An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unautCVE-2024-220248.3An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and
CVE-2024-22013: Medium severity, CVSS 5.3 | Vulnix