PT-2020-4943

Name of the Vulnerable Software and Affected Versions: IntelR Board ID Tool version v.1.01 Description: The issue is related to incorrect default permissions in the IntelR Board ID Tool, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is...

CVE-2020-8744: Improper Initialization

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12345: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12317: Undefined Security Weakness

Improper buffer restriction in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-12333: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12319: Undefined Security Weakness

Insufficient control flow management in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-12332: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8754: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-8757: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8691: Undefined Security Weakness

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690: Undefined Security Weakness

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0587: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0588: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0575: Undefined Security Weakness

Improper buffer restrictions in the IntelR Unite Client for Windows before version 4.2.13064 may allow an authenticated user to potentially enable information disclosure via local access...

RUSTSEC-2020-0120 `Decoder<R>` can carry `R: !Send` to other threads

Affected versions of this crate implements Send for Decoder for any R: Read. This allows Decoder to contain R: !Send and carry move it to another thread. This can result in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard from a thread that didn't lock...

`Decoder<R>` can carry `R: !Send` to other threads

Affected versions of this crate implements Send for Decoder for any R: Read. This allows Decoder to contain R: !Send and carry move it to another thread. This can result in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard from a thread that didn't lock...

PT-2020-4912

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 20.8.30.6 Description: The issue is related to incorrect default permissions, which may allow an authenticated user to potentially enable denial of service via local access. The vulnerability is associated with...

PT-2020-4781

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions prior to 21.110 Description: The issue is related to insufficient control flow management in some IntelR PROSet/Wireless WiFi products. This may allow an unauthenticated user to potentially enable denial o...

PT-2020-4793

Name of the Vulnerable Software and Affected Versions: IntelR EMA versions prior to 1.3.3 Description: The issue is related to path traversal in the IntelR EMA, which may allow an unauthenticated user to potentially enable escalation of privilege via network access. This is due to incorrect...

PT-2020-4945

Name of the Vulnerable Software and Affected Versions: IntelR Server Board S2600ST and S2600WF families affected versions not specified Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege v...