Intel-SA-01175: UEFI Firmware Privilege Escalation and Info Disclosure in Intel Server Boards

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability ID: INTEL-SA-01175 2. Affected Products: - Intel® Server Board M70KLP Family - Intel® Server Board M10JNP2SB Family - Intel® Server Board M20NTP Family - Intel® Server Board S2600BPBR Family - Intel® Server Board S2600BP Family 3. Vulnerability Types: - Escalation of Privilege (Privilege Escalation) - Information Disclosure 4. Severity: HIGH 5. Original Release Date: 11/12/2024 6. Most Recent Revision Date: 11/12/2024 7. Vulnerability Description: - Improper input validation in UEFI firmware in some Intel® Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access. - Improper input validation in UEFI firmware for some Intel® Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access. - Improper input validation in UEFI firmware in some Intel® Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access. - Improper input validation in UEFI firmware in some Intel® Server Board M20NTP Family may allow a privileged user to potentially enable escalation of privilege via local access. - Improper Access Control in UEFI firmware for some Intel® Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access. - Improper access control in UEFI firmware in some Intel® Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access. - (Repeated entries for "Improper access control in UEFI firmware in some Intel® Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access" — multiple duplicates listed, likely due to formatting or copy-paste error) > Note: The vulnerability description contains numerous repeated entries for the M20NTP Family regarding information disclosure, which may be an artifact of the source document or screenshot. The core issue is improper access control in UEFI firmware leading to information disclosure via local access.

Goal Reached Thanks to every supporter — we hit 100%!

Intel-SA-01175: UEFI Firmware Privilege Escalation and Info Disclosure in Intel Server Boards