CVE-2024-31068 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.3 MEDIUM	LOCAL	HIGH	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
intel	CNA	5.3 MEDIUM	LOCAL	HIGH	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
CISA-ADP	ADP	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 12%

Debian Releases

Debian Product

Codename

intel-microcode

bullseye/non-free	vulnerable
bullseye/non-free (security)	3.20250812.1~deb11u1 fixed
bookworm/non-free-firmware	3.20250512.1~deb12u1 fixed
bookworm/non-free-firmware (security)	3.20250812.1~deb12u1 fixed
trixie/non-free-firmware (security)	3.20250812.1~deb13u1 fixed
trixie/non-free-firmware	3.20250812.1~deb13u1 fixed
sid/non-free-firmware	3.20251111.1 fixed
forky/non-free-firmware	3.20251111.1 fixed

Ubuntu Releases

Ubuntu Product

Codename

intel-microcode

oracular	Fixed 3.20250211.0ubuntu0.24.10.1 released
noble	Fixed 3.20250211.0ubuntu0.24.04.1 released
jammy	Fixed 3.20250211.0ubuntu0.22.04.1 released
focal	Fixed 3.20250211.0ubuntu0.20.04.1 released
bionic	Fixed 3.20250211.0ubuntu0.18.04.1+esm1 released
xenial	Fixed 3.20250211.0ubuntu0.16.04.1+esm1 released
trusty	ignored

Common Weakness Enumeration

CWE-1245 - Improper Finite State Machines (FSMs) in Hardware Logic
Faulty finite state machines (FSMs) in the hardware logic allow an attacker to put the system in an undefined state, to cause a denial of service (DoS) or gain privileges on the victim's system.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html

https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html