CVE Feed

    Dashboard / CVE / CVE-2024-34167

    CVE-2024-34167

    Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published:Nov 13, 2024
    Last Modified:Apr 15, 2026
    EPS:Nov 13, 2024
    EPSS Score:0.00257
    CVSS Score:6.7

    Affected Products

    Vendor
    Intel
    Product
    Server Board S2600st Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Related CVEs

    CVE-2024-36282 (CVSS 7.1) — Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all ve…
    CVE-2024-28947 (CVSS 7.1) — Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before …
    CVE-2020-0572 (CVSS 6.7) — Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a p…
    CVE-2020-8720 (CVSS 5.5) — Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before vers…
    CVE-2020-8717 (CVSS 5.5) — Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules befo…
    CVE-2020-8714 (CVSS 7.8) — Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.5…
    CVE-2020-8716 (CVSS 5.5) — Improper access control for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.5…
    CVE-2020-8715 (CVSS 5.5) — Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may al…
    CVE-2020-8729 (CVSS 7.8) — Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules…
    CVE-2020-8706 (CVSS 8.8) — Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High