Scontain Scone — known CVE vulnerabilities

Every CVE whose affected-product data names Scontain Scone, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-29971 — CVSS 9.8 (critical): Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.
• CVE-2022-46487 — CVSS 7.8 (high): Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for…
• CVE-2022-46486 — CVSS 5.5 (medium): A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access…
• CVE-2023-38023 — CVSS 5.5 (medium): An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in…