CVE-2024-28047: Input Validation
CVE-2024-39279 Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access. CVE-2024-28047 Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.8.4 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20250211.1~deb12u1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20250211.1 - Upgrade
Upgrade
debian/intel-microcodeto a version that resolves this vulnerability.Fixed in 3.20251111.1~deb12u1Fixed in 3.20250812.1~deb12u1Fixed in 3.20251111.1~deb13u1Fixed in 3.20250812.1~deb13u1Fixed in 3.20260227.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28047?
The severity of CVE-2024-28047 is rated as high due to the potential for privilege escalation and impact on system integrity.
How do I fix CVE-2024-28047?
To fix CVE-2024-28047, you should update the UEFI firmware to the latest version provided by your hardware vendor.
What types of systems are affected by CVE-2024-28047?
CVE-2024-28047 affects F5 F5OS-A and F5 F5OS-C versions specified in the advisory details.
Can CVE-2024-28047 be exploited remotely?
CVE-2024-28047 requires local access to the system, reducing the likelihood of a remote exploitation.
What mitigation strategies are available for CVE-2024-28047?
Mitigation strategies for CVE-2024-28047 include restricting physical access to the affected systems and applying firmware updates promptly.