CVE-2024-38307

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Improper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow an authenticated user to potentially enable denial of service via network access.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	Intel(R) AMT and Intel(R) Standard Manageability	See references

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01152.html

Timeline

Published: Feb 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-383086.1Advantech ADAM 5550's web application includes a "logs" page where all the HTTP requests received are displayed to the user. The device doe CVE-2024-383097.8There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and earlier), and TELLUS L CVE-2024-38315.4The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading CVE-2024-383108.2Improper access control in some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalatio CVE-2024-383116.3Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from CVE-2024-383126.5When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed CVE-2024-383134.3In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website CVE-2024-383145.9IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-coded cryptographic CVE-2024-383156.5IBM Aspera Shares 1.0 through 1.10.0 PL3 does not invalidate session after a password reset which could allow an authenticated user to imper CVE-2024-383166.5IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which coul CVE-2024-383174.8IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbi CVE-2024-383186.1IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when v