CVE-2024-29980: Unsafe Handling of IHV UEFI Variables
Published Jan 14, 2025
·Updated
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334.
Affected Software
309 affected components
Phoenix SecureCore for Intel Kaby Lake<4.0.1.1012
Phoenix SecureCore for Intel Coffee Lake<4.1.0.568
Phoenix SecureCore for Intel Comet Lake<4.2.1.292
Phoenix SecureCore for Intel Ice Lake<4.2.0.334
All of the following
Phoenixtech Securecore Technology<4.0.1.1012
Any of the following
Intel Celeron 3865u
Intel Celeron 3867u
Intel Celeron 3965u
Intel Celeron 3965y
Intel Celeron G3930
Intel Celeron G3930t
Intel Celeron G3950
Intel Core I3-7020u
Intel Core I3-7100
Intel Core I3-7100h
Intel Core I3-7100t
Intel Core I3-7100u
Intel Core I3-7101e
Intel Core I3-7101te
Intel Core I3-7130u
Intel Core I3-7167u
Intel Core I3-7300
Intel Core I3-7300t
Intel Core I3-7320
Intel Core I3-7350k
Intel Core I3-8130u
Intel Core I5-7200u
Intel Core I5-7260u
Intel Core I5-7267u
Intel Core I5-7287u
Intel Core I5-7300hq
Intel Core I5-7300u
Intel Core I5-7360u
Intel Core I5-7400
Intel Core I5-7400t
Intel Core I5-7440hq
Intel Core I5-7500
Intel Core I5-7500t
Intel Core I5-7600
Intel Core I5-7600k
Intel Core I5-7600t
Intel Core I5-7640x
Intel Core I5-7y54
Intel Core I5-7y57
Intel Core I5-8250u
Intel Core I5-8305g
Intel Core I5-8350u
Intel Core I7-7500u
Intel Core I7-7560u
Intel Core I7-7567u
Intel Core I7-7600u
Intel Core I7-7660u
Intel Core I7-7700
Intel Core I7-7700hq
Intel Core I7-7700k
Intel Core I7-7700t
Intel Core I7-7740x
Intel Core I7-7820hk
Intel Core I7-7820hq
Intel Core I7-7920hq
Intel Core I7-7y75
Intel Core I7-8500y
Intel Core I7-8550u
Intel Core I7-8650u
Intel Core I7-8705g
Intel Core I7-8706g
Intel Core I7-8709g
Intel Core I7-8809g
Intel Core M3-7y30
Intel Core M3-7y32
Intel Pentium Gold 4410y
Intel Pentium Gold 4415u
Intel Pentium Gold 4415y
Intel Pentium Gold 4417u
Intel Pentium Gold G4600
Intel Pentium Gold G4600t
Intel Pentium Gold G4620
Intel Xeon E3-1220
Intel Xeon E3-1225
Intel Xeon E3-1230
Intel Xeon E3-1240
Intel Xeon E3-1245
Intel Xeon E3-1270
Intel Xeon E3-1275
Intel Xeon E3-1280
Intel Xeon E3-1285
Intel Xeon E3-1505l
Intel Xeon E3-1505m
Intel Xeon E3-1535m
All of the following
Phoenixtech Securecore Technology<4.1.0.568
Any of the following
Intel Celeron G4900
Intel Celeron G4900t
Intel Celeron G4920
Intel Celeron G4930
Intel Celeron G4930t
Intel Celeron G4950
Intel Core I3-8100
Intel Core I3-8100b
Intel Core I3-8100f
Intel Core I3-8100h
Intel Core I3-8100t
Intel Core I3-8109u
Intel Core I3-8300
Intel Core I3-8300t
Intel Core I3-8350k
Intel Core I3-9100
Intel Core I3-9100f
Intel Core I3-9100t
Intel Core I3-9300
Intel Core I3-9300t
Intel Core I3-9320
Intel Core I3-9350k
Intel Core I3-9350kf
Intel Core I5-8257u
Intel Core I5-8259u
Intel Core I5-8260u
Intel Core I5-8269u
Intel Core I5-8279u
Intel Core I5-8300h
Intel Core I5-8400
Intel Core I5-8400b
Intel Core I5-8400h
Intel Core I5-8400t
Intel Core I5-8500
Intel Core I5-8500b
Intel Core I5-8500t
Intel Core I5-8600
Intel Core I5-8600k
Intel Core I5-8600t
Intel Core I5-9300h
Intel Core I5-9300hf
Intel Core I5-9400
Intel Core I5-9400f
Intel Core I5-9400h
Intel Core I5-9400t
Intel Core I5-9500
Intel Core I5-9500f
Intel Core I5-9500t
Intel Core I5-9600
Intel Core I5-9600k
Intel Core I5-9600kf
Intel Core I5-9600t
Intel Core I7-8086k
Intel Core I7-8557u
Intel Core I7-8559u
Intel Core I7-8569u
Intel Core I7-8700
Intel Core I7-8700b
Intel Core I7-8700k
Intel Core I7-8700t
Intel Core I7-8750h
Intel Core I7-8850h
Intel Core I7-9700
Intel Core I7-9700f
Intel Core I7-9700k
Intel Core I7-9700kf
Intel Core I7-9700t
Intel Core I7-9750h
Intel Core I7-9750hf
Intel Core I7-9850h
Intel Core I9-8950hk
Intel Core I9-9880h
Intel Core I9-9900
Intel Core I9-9900k
Intel Core I9-9900kf
Intel Core I9-9900ks
Intel Core I9-9900t
Intel Core I9-9980hk
Intel Pentium Gold G5400
Intel Pentium Gold G5400t
Intel Pentium Gold G5420
Intel Pentium Gold G5420t
Intel Pentium Gold G5500
Intel Pentium Gold G5500t
Intel Pentium Gold G5600
Intel Pentium Gold G5600t
Intel Pentium Gold G5620
Intel Xeon E-2104g
Intel Xeon E-2124
Intel Xeon E-2124g
Intel Xeon E-2126g
Intel Xeon E-2134
Intel Xeon E-2136
Intel Xeon E-2144g
Intel Xeon E-2146g
Intel Xeon E-2174g
Intel Xeon E-2176g
Intel Xeon E-2176m
Intel Xeon E-2186g
Intel Xeon E-2186m
Intel Xeon E-2224
Intel Xeon E-2224g
Intel Xeon E-2226g
Intel Xeon E-2234
Intel Xeon E-2236
Intel Xeon E-2244g
Intel Xeon E-2246g
Intel Xeon E-2274g
Intel Xeon E-2276g
Intel Xeon E-2276m
Intel Xeon E-2278g
Intel Xeon E-2286g
Intel Xeon E-2286m
Intel Xeon E-2288g
All of the following
Phoenixtech Securecore Technology>=4.0.1.1<4.2.1.292
Any of the following
Intel Celeron G5900
Intel Celeron G5900t
Intel Celeron G5905
Intel Celeron G5905t
Intel Celeron G5920
Intel Celeron G5925
Intel Core I3-10105
Intel Core I3-10105f
Intel Core I3-10105t
Intel Core I3-10110u
Intel Core I3-10305
Intel Core I3-10305t
Intel Core I3-10325
Intel Core I5-10200h
Intel Core I5-10210u
Intel Core I5-10300h
Intel Core I5-10310u
Intel Core I5-10400h
Intel Core I5-10500h
Intel Core I5-10505
Intel Core I7-10510u
Intel Core I7-10610u
Intel Core I7-10710u
Intel Core I7-10750h
Intel Core I7-10810u
Intel Core I7-10850h
Intel Core I7-10870h
Intel Core I7-10875h
Intel Core I9-10885h
Intel Core I9-10980hk
Intel Pentium 6405u
Intel Pentium Gold G6405
Intel Pentium Gold G6405t
Intel Pentium Gold G6505
Intel Pentium Gold G6505t
Intel Pentium Gold G6605
Intel Xeon W-10855m
Intel Xeon W-10885m
Intel Xeon W-1250
Intel Xeon W-1250p
Intel Xeon W-1270
Intel Xeon W-1270p
Intel Xeon W-1290
Intel Xeon W-1290p
Intel Xeon W-1290t
All of the following
Phoenixtech Securecore Technology<4.2.0.334
Any of the following
Intel Core I3-1000g1
Intel Core I3-1000g4
Intel Core I3-1000ng4
Intel Core I3-1005g1
Intel Core I5-1030g4
Intel Core I5-1030g7
Intel Core I5-1030ng7
Intel Core I5-1035g1
Intel Core I5-1035g4
Intel Core I5-1035g7
Intel Core I5-1038ng7
Intel Core I7-1060g7
Intel Core I7-1060ng7
Intel Core I7-1065g7
Intel Core I7-1068ng7
Intel Pentium 6805
Intel Xeon Gold 5315y
Intel Xeon Gold 5317
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y
Intel Xeon Gold 5320
Intel Xeon Gold 5320t
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u
Intel Xeon Gold 6326
Intel Xeon Gold 6330
Intel Xeon Gold 6330n
Intel Xeon Gold 6334
Intel Xeon Gold 6336y
Intel Xeon Gold 6338
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t
Intel Xeon Gold 6342
Intel Xeon Gold 6346
Intel Xeon Gold 6348
Intel Xeon Gold 6354
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8380
Intel Xeon Silver 4309y
Intel Xeon Silver 4310
Intel Xeon Silver 4310t
Intel Xeon Silver 4314
Intel Xeon Silver 4316
Intel Xeon W-3323
Intel Xeon W-3335
Intel Xeon W-3345
Intel Xeon W-3365
Intel Xeon W-3375
Event History
Jan 14, 2025
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29980?
CVE-2024-29980 is classified as a high severity vulnerability due to its potential for input data manipulation.
2
Which versions of Phoenix SecureCore are affected by CVE-2024-29980?
CVE-2024-29980 affects Phoenix SecureCore for Intel Kaby Lake versions up to 4.0.1.1012, Coffee Lake versions up to 4.1.0.568, Comet Lake versions up to 4.2.1.292, and Ice Lake versions up to 4.2.0.334.
3
How do I fix CVE-2024-29980?
To fix CVE-2024-29980, users should update their Phoenix SecureCore software to the latest versions provided by Phoenix.
4
What type of vulnerability is CVE-2024-29980?
CVE-2024-29980 is categorized as an improper check for unusual or exceptional conditions vulnerability.
5
What are the potential risks of CVE-2024-29980?
The potential risks of CVE-2024-29980 include unauthorized input data manipulation that could lead to system compromise.