PT-2021-12914

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to an out of bounds write in the BMC firmware, which may allow an unauthenticated user to potentially enable a denial of service v...

CVE-2021-0097: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...

PT-2021-5796

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Xen affected versions not specified Description The issue is related to an observable response discrepancy that may allow an authorized user to potentially enable information disclosure via loc...

PT-2021-12876

Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kit LAN Drivers versions prior to 10.42 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-9443

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description A protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24512: Observable Discrepancy

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24489: Incomplete Cleanup

Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24511: Exposure of Resource to Wrong Sphere

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

PT-2021-9451

Name of the Vulnerable Software and Affected Versions IntelR ThunderboltTM controllers affected versions not specified Description The issue is related to uncontrolled resource consumption in some IntelR ThunderboltTM controllers. This may allow an authenticated user to potentially enable denial ...

PT-2021-12810

Name of the Vulnerable Software and Affected Versions: IntelR Processor Diagnostic Tool versions prior to 4.1.5.37 Description: The issue is related to an uncontrolled search path element in the IntelR Processor Diagnostic Tool, which may allow an authenticated user to potentially enable escalati...

CVE-2020-24506: Out-of-bounds Read

Out of bound read in a subsystem in the IntelR CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0052: Improper Privilege Management

Incorrect default privileges in the IntelR Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0095: Improper Initialization

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0104: Uncontrolled Search Path Element

Uncontrolled search path element in the installer for the IntelR Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0113: Out-of-bounds Write

Out of bounds write in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...

CVE-2021-0108: Uncontrolled Search Path Element

Uncontrolled search path in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

PT-2021-9454

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to insufficient control flow management in the firmware for some IntelR Processors. This may allow an unauthenticated user to potentially enable escalation of...

CVE-2020-8702: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0102: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2020-12357: Improper Initialization

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...