CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables
Attackers can manipulate input data in Phoenix SecureCore firmware to potentially execute code or escalate privileges on affected Intel systems.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-29979?
CVE-2024-29979 is a medium-severity vulnerability in Phoenix SecureCore™ for Intel Coffee Lake, published on 14 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334.
Weakness: CWE-754
Which versions are affected by CVE-2024-29979?
It affects 1 product.
Products include Phoenixtech Securecore Technology.
How do I fix CVE-2024-29979?
No fix has been published for CVE-2024-29979 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-29979 being exploited?
There is no known exploitation of CVE-2024-29979 in the wild and no public exploit code.
Other vulnerabilities in Phoenix SecureCore™ for Intel Coffee Lake
- CVE-2023-31100 Missing authorization in SecureCore™ Technology™ 4
- CVE-2023-5058 Other in SecureCore™ Technology™ 4
- CVE-2024-0762 Potential buffer overflow when handling UEFI variables
- CVE-2024-1598 Potential buffer overflow when handling UEFI variables
- CVE-2024-29980 Unsafe Handling of IHV UEFI Variables
Sources
Also known as GHSA-x4p9-p8g9-v45f.