CVE-2024-30211 MEDIUM

CVE-2024-30211

Vendor N/A

Product Intel(R) ME driver pack installer engines

Weakness CWE-284

Published February 12, 2025

Last update February 13, 2025

View on NVD All CVEs

CVSS base score

6.0/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Key dates

02Disclosure timeline

February 12, 2025 CVE published

February 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-30211 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

Identifiers

CVE CVE-2024-30211

CWE CWE-284

CVSS 6.0 / MEDIUM

Affected versions