CVE-2024-12546: Potential iSCSI R2T PDU Vulnerability
Published Mar 11, 2025
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
EDK2 EDK2
Event History
Mar 11, 2025
CVE Published
via MITRE·02:02 PM
Rejected
via MITRE·02:02 PM
Data Sourced
via NVD·02:15 PM
Description
Mar 13, 2025
Rejected
via MITRE·02:48 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-12546?
CVE-2024-12546 has a high severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2024-12546?
To fix CVE-2024-12546, apply the latest firmware update from the EDK2 vendor that addresses this vulnerability.
3
Who is affected by CVE-2024-12546?
CVE-2024-12546 affects users of the EDK2 BIOS that utilize network functionalities.
4
What type of attack does CVE-2024-12546 enable?
CVE-2024-12546 enables attacks that may result in an integer overflow or wraparound, leading to a denial of service.
5
Is there a workaround for CVE-2024-12546?
Currently, there is no documented workaround for CVE-2024-12546; updating the firmware is the recommended action.