2024.3 IPU - Intel® Chipset Firmware Advisory

🗓️ 22 Aug 2024 00:00:00Reported by Intel Security CenterType

Intel Chipset security advisory reveals vulnerabilities allowing privilege escalation and information disclosure.

Reporter	Title	Published	Views	Family All 57
AstraLinux	Astra Linux – Vulnerability in Linux-Firmware	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to initialization errors, allow attackers to exploit these vulnerabilities to disclose protected information.	12 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel’s microprogrammed chipset and processor software, related to integer overflow, allows attackers to trigger malfunctions during maintenance operations.	22 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Microprogramming Software Subsystem of the Intel Converged Security and Manageability Engine (CSME) allows a perpetrator to trigger a service failure or increase their privileges.	23 Oct 202400:00	–	bdu_fstec
BDU FSTEC	A vulnerability in the Microprogramming Software Subsystem of the Intel Converged Security and Manageability Engine (CSME) exists, due to insufficient validation of input data. This allows attackers to trigger a service failure.	23 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogramming software in Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) arises from improper elimination of special elements in output data, allowing attackers to trigger a service failure.	11 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from improper initialization of resources, allowing attackers to disclose protected information.	2 Dec 202400:00	–	bdu_fstec
Circl	CVE-2023-35061	14 Feb 202417:02	–	circl
CNNVD	Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software Security Vulnerabilities	14 Feb 202400:00	–	cnnvd
CVE	CVE-2023-34424	14 Aug 202413:45	–	cve

13 Aug 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.16.8

CVSS 46.9

EPSS0.00501

SSVC