CVE-2023-29494: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-21177

Name of the Vulnerable Software and Affected Versions IntelR Advanced Link Analyzer Standard Edition versions prior to 22.1.1 Description The issue is related to incorrect default permissions in some software installers, which may allow an authenticated user to potentially enable escalation of...

CVE-2023-25944: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34355: Uncontrolled Search Path Element

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22841: Unquoted Search Path or Element

Unquoted search path in the software installer for the System Firmware Update Utility SysFwUpdt for some IntelR Server Boards and IntelR Server Systems Based on IntelR 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27391: Improper Access Control

Improper access control in some IntelR oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-25773: Improper Access Control

Improper access control in the IntelR UniteR Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-23265

Name of the Vulnerable Software and Affected Versions IntelR SDP Tool versions prior to 1.4 build 5 Description The issue is related to incorrect default permissions in the IntelR SDP Tool software. This may allow an authenticated user to potentially enable escalation of privilege via local acces...

CVE-2022-38102: Improper Input Validation

Improper Input validation in firmware for some IntelR Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-36392: Improper Input Validation

Improper input validation in some firmware for IntelR AMT and IntelR Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70, 15.0.45, and 16.1.27 in Intel R CSME may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-40964: Improper Access Control

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-46329: Protection Mechanism Failure

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38083: Improper Initialization

Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-25864: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28714: Improper Access Control

Improper access control in firmware for some IntelR PROSet/Wireless WiFi software for Windows before version 22.220 HF Hot Fix may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-43505: Insufficient Control Flow Management

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-28736: Buffer Copy without Checking Size of Input

Buffer overflow in some IntelR SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38076: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29871: Improper Access Control

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29887: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS in some IntelR Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...