PT-2021-11040

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions before SPS E3 05.01.04.300.0 IntelR SPS versions before SPS SoC-A 05.00.03.091.0 IntelR SPS versions before SPS E5 04.04.04.023.0 IntelR SPS versions before SPS E5 04.04.03.263.0 Description: The issue is related to...

PT-2021-12861

Name of the Vulnerable Software and Affected Versions: IntelR IPP versions prior to 2020 update 1 Description: The issue is related to an observable timing discrepancy that may allow an authorized user to potentially enable information disclosure via local access. Recommendations: For versions...

PT-2021-12811

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions before 11.8.86 IntelR CSME versions before 11.12.86 IntelR CSME versions before 11.22.86 IntelR CSME versions before 12.0.81 IntelR CSME versions before 13.0.47 IntelR CSME versions before 13.30.17 IntelR CSME versions...

PT-2021-12873

Name of the Vulnerable Software and Affected Versions: IntelR Computing Improvement Program versions prior to 2.4.6522 Description: The issue is related to incorrect default privileges that may allow an authenticated user to potentially enable an escalation of privilege via local access...

PT-2021-12899

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 20.11.50.9 Description: The issue is related to an uncontrolled search path element, which may allow an authenticated user to potentially enable an escalation of privilege via local access. Recommendations: For...

CVE-2020-24486: Improper Input Validation

Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12288: Undefined Security Weakness

Protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12358: Out-of-bounds Write

Out of bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0100: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access...

Information Disclosure Vulnerability in lenovonet Reporting Center

Ltd. "TGN" is a data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. Its predecessor is the R&D team of the Network Division of Lenovo Group, which was...

CVE-2020-8704: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in a subsystem in the IntelR LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0067: Undefined Security Weakness

Improper access control in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0054: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0094: Improper Link Resolution Before File Access

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0074: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-11034

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards, Server Systems and Compute Modules versions prior to 2.48.ce3e3bd2 Description: The issue is related to an out of bounds write in the BMC firmware, which may allow an authenticated user to potentially enable escalation o...

CVE-2021-0134: Improper Input Validation

Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

PT-2021-12872

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E5 04.04.04.023.0 IntelR SPS versions prior to SPS E5 04.04.03.228.0 IntelR SPS versions prior to SPS SoC-A 05.00.03.098.0 Description: The issue is related to improper input validation, which may allow a...

CVE-2020-12291: Uncontrolled Resource Consumption

Uncontrolled resource consumption in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-12914

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to an out of bounds write in the BMC firmware, which may allow an unauthenticated user to potentially enable a denial of service v...