Intel TDX Module Firmware Local Information Disclosure (CVE-2024-27457)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - CVE ID: CVE-2024-27457 - Description: In Intel® Trust Domain Extensions (TDX) Module firmware versions prior to 1.5.06, incorrect checks may allow unauthorized users with local access to access sensitive information. 2. Affected Scope: - Affected Products: All versions of Intel® TDX Module firmware prior to version 1.5.06. 3. Recommended Actions: - Intel recommends users update to the latest version provided by their system manufacturer to resolve this issue. 4. Disclosure Information: - Intel follows coordinated disclosure practices and typically discloses security vulnerabilities only after remediation measures are available. 5. Legal Disclaimers and Notices: - Intel provides materials "as is" without any express or implied warranties. - Intel products and services may contain design defects or errors that could cause products to deviate from specifications. - Features and benefits of Intel products and services depend on system configuration and may require enabling hardware, software, or service activation. - Intel does not guarantee that any product or component is absolutely secure. - Intel’s performance data may be based on internal analysis, architectural simulation, or modeling and is for reference only. 6. Reporting Vulnerabilities: - If you have information regarding security issues, please contact Intel’s Product Security Team via email. - Provide as much detail as possible, including the affected product and version, a detailed description of the vulnerability, and any known exploitation methods. 7. Product Support: - For inquiries regarding Intel product security features, technical support, or product updates, please visit the Support & Downloads page. This information helps users understand the nature of the vulnerability, the scope of affected products, recommended mitigation steps, and how to report issues or obtain product support.

Goal Reached Thanks to every supporter — we hit 100%!

Intel TDX Module Firmware Local Information Disclosure (CVE-2024-27457)