CVE-2021-0133: Undefined Security Weakness

Key exchange without entity authentication in the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2020-12294: Undefined Security Weakness

Insufficient control flow management in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-12906

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: A buffer overflow issue exists in the BMC firmware, potentially allowing an unauthenticated user with adjacent access to escalate privileges...

PT-2021-12920

Name of the Vulnerable Software and Affected Versions: IntelR Security Library versions prior to 3.3 Description: The issue is related to key exchange without entity authentication, which may allow an authenticated user to potentially enable escalation of privilege via network access...

PT-2021-12903

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to path traversal in the BMC firmware, which may allow an unauthenticated user to potentially enable a denial of service via...

PT-2021-12887

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to improper input validation in the BMC firmware, which may allow an unauthenticated user to potentially enable an escalation of...

CVE-2020-24516: Undefined Security Weakness

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-0089: Observable Discrepancy

Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12290: Undefined Security Weakness

Improper access control in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-0112: Unquoted Search Path or Element

Unquoted service path in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

PT-2021-11041

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM IDs affected versions not specified Description: The issue is related to improper authentication in some IntelR RealSenseTM IDs, which may allow an unauthenticated user to potentially enable escalation of privilege via...

CVE-2020-12289: Out-of-bounds Write

Out-of-bounds write in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12295: Improper Input Validation

Improper input validation in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12360: Out-of-bounds Read

Out of bounds read in the firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12359: Undefined Security Weakness

Insufficient control flow management in the firmware for some IntelR Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-12296: Uncontrolled Resource Consumption

Uncontrolled resource consumption in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-8700: Improper Input Validation

Improper input validation in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8670: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2021-12901

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper initialization in the firmware, which may allow a privileged user to potentially enable a denial of service via local access. Recommendations: At...

PT-2021-12875

Name of the Vulnerable Software and Affected Versions: IntelR NUC system firmware affected versions not specified Description: The issue is related to improper buffer restrictions in the system firmware, which may allow a privileged user to potentially enable escalation of privilege via local...