CVE-2024-42419
Last modified
CVE-2024-42419 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Incorrect default permissions for some Intel(R) GPA and Intel(R) GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Incorrect default permissions for some Intel(R) GPA and Intel(R) GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-42419?
How severe is CVE-2024-42419?
How do I fix CVE-2024-42419?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-42411Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <…5.3
- CVE-2024-42412Cross-site scripting vulnerability exists in ELECOM wireless…6.1
- CVE-2024-42415An integer overflow vulnerability exists in the Compound Doc…7.8
- CVE-2024-42416The ctl_report_supported_opcodes function did not sufficient…8.8
- CVE-2024-42417Delta Electronics DIAEnergie is vulnerable to an SQL injecti…8.8
- CVE-2024-42418Avtec Outpost uses a default cryptographic key that can be u…7.5
- CVE-2024-4242A vulnerability was found in Tenda W9 1.0.0.7(4456). It has …8.8
- CVE-2024-42420Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Re…7.5
- CVE-2024-42422Dell NetWorker, version(s) 19.10, contain(s) an Authorizatio…7.5
- CVE-2024-42423Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311…7.1
- CVE-2024-42424Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2…6
- CVE-2024-42425Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2…5.5
Are you affected by CVE-2024-42419?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST