Skip to main content
CVE-2024-21859VulnerabilityPublished Updated

Bundesamt für Sicherheit in der Informationstechnik Amazon · Intel Firmware: Mehrere Schwachstellen

Affects Bundesamt für Sicherheit in der Informationstechnik AmazonSource GCVE Database

0

Mentioned vulnerabilities

Not known to be exploited.

Data as of 27 Oct 2026, 01:53 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 11 Feb 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

AI-suggested

Apply the Intel microcode updates provided by Ubuntu security notices USN-7269-1 and USN-7269-2 for your respective Ubuntu release. After updating the intel-microcode package, reboot the system to activate the fixes. Ubuntu Pro subscribers have extended support for older LTS releases. No additional mitigation is required beyond applying these official microcode updates.

Description

Multiple security vulnerabilities have been identified in Intel microcode affecting various Intel processors. These issues involve improper implementation of finite state machines in hardware logic, improper access restrictions in Intel SGX, and UEFI firmware access control weaknesses. Local privileged or authenticated attackers could exploit these flaws to cause denial of service conditions. Fixes have been released in updated Intel microcode packages for several Ubuntu releases, requiring system updates and reboots to apply.

References

Community reviews

Loading reviews…