 |
| New Intel CPU Vulnerability CVE-2024-0762: Remote Code Execution Threat Discovered |
Security experts have identified a new vulnerability in Intel CPUs that could permit attackers to execute malicious code remotely. This vulnerability, identified as CVE-2024-0762, is a buffer overflow issue affecting various Intel CPU models, including Alder Lake, Coffee Lake, Comet Lake, Ice Lake, Jasper Lake, Kaby Lake, Meteor Lake, Raptor Lake, Rocket Lake, and Tiger Lake.
The flaw, located in Phoenix SecureCore UEFI firmware, has been named “UEFICANHAZBUFFEROVERFLOW.” Researchers from Eclypsium discovered the bug initially in Lenovo ThinkPad X1 Carbon 7th Gen and X1 Yoga 4th Gen devices, but the extensive range of affected CPUs suggests a much larger number of vulnerable devices.
BleepingComputer reports that Lenovo has issued new firmware updates to fix the issue. However, due to the vulnerability impacting multiple manufacturers, it may take some time before all devices receive the necessary patches. Users are advised to check with their device manufacturers for available updates.
Eclypsium explained that the vulnerability is found in the System Management Mode (SMM) subsystem of the Phoenix SecureCore firmware, which allows attackers to overwrite adjacent memory. This can enable the attacker to elevate privileges and remotely execute code using malware known as a bootkit. The vulnerability stems from an unsafe variable in the Trusted Platform Module (TPM) configuration, potentially leading to a buffer overflow and malicious code execution. Eclypsium emphasized that the issue lies in the UEFI code handling TPM configuration, making the presence of a security chip like a TPM irrelevant if the underlying code is flawed.
0 Comments