CVE Vulnerabilities

CVE-2024-7756

Active Debug Code

Published: Sep 13, 2024 | Modified: Sep 14, 2024

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-7756
CWE	https://cwe.mitre.org/data/definitions/489.html

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

Weakness

The product is released with debugging code still enabled or active.

Potential Mitigations

References

https://support.lenovo.com/us/en/product_security/LEN-165524

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.

CVE-2024-7756

Active Debug Code

Weakness

Potential Mitigations

Related Attack Patterns

References