CVE-2024-25565

LowCVSS 3.8/10Last modified Jun 17, 2026

Description

Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated user to enable denial of service via local access.

Metrics

CVSS 3.1 3.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Weakness enumeration

CWE-691

Affected software

VendorProductVersions
n/aIntel(R) Xeon(R) ProcessorsSee references

References

Timeline

Published
Nov 13, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-255666.1An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allowCVE-2024-255678.8Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specifCVE-2024-255688.8OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to execute arbitrary OSCVE-2024-255696.5An out-of-bounds read vulnerability exists in the RAWCodec::DecodeBytes functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specialCVE-2024-25579.1A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknowCVE-2024-255712.3Improper input validation in some Intel(R) SPS firmware before SPS_E5_06.01.04.059.0 may allow a privileged user to potentially enable deniaCVE-2024-255728.8Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page whiCVE-2024-255736.9Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequentCVE-2024-255749.8SQL injection vulnerability exists in GetDIAE_usListParameters.CVE-2024-255758.8A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted JavascCVE-2024-255767.9improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of CVE-2024-255787.8MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result
CVE-2024-25565: Low severity, CVSS 3.8 | Vulnix