CVE-2024-42492

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Uncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R) Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Feb 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-424935.3Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers and the rendered Java CVE-2024-424947.5Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view an CVE-2024-424957.5Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to CVE-2024-424962.4Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is explo CVE-2024-424974.9Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a use CVE-2024-424995.3Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this CVE-2024-42508.8A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been declared as critical. Affected by this vulnerability is the function form CVE-2024-425009.3HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services.CVE-2024-425017.2An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to i CVE-2024-425027.2Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability re CVE-2024-425037.2Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabil CVE-2024-425044.3A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login