190 matches found
HPESBHF04522 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920 Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920d Server Blade - Prior to 1.7407-24-2023...
HPESBHF04505 rev.1 - Certain HPE ProLiant DL Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DL380 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DL110 Gen10 Plus Telco server - Prio...
Cross-Process Information Leak
Bulletin ID: AMD-SB-7008 Potential Impact: Information disclosure Severity: Medium Summary Under specific microarchitectural circumstances, a register in “Zen 2” CPUs may not be written to 0 correctly. This may cause data from another process and/or thread to be stored in the YMM register, which...
PT-2023-9249 · Dell · Dell Edge Gateway Bios
Name of the Vulnerable Software and Affected Versions: Dell Edge Gateway BIOS versions 3200 and 5200 Description: The issue is related to an out-of-bounds write vulnerability in the System Management Mode SMM of the BIOS firmware. This could be exploited by a local authenticated malicious user wi...
CVE-2022-38101
Uncontrolled search path in some IntelR NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncontrolled search path in some IntelR NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-38101
Uncontrolled search path in some IntelR NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-13587 · Intel · Intel(R) Nuc Chaco Canyon Bios Update
Name of the Vulnerable Software and Affected Versions: IntelR NUC Chaco Canyon BIOS update software versions prior to iFlashV Windows 5.13.00.2105 Description: The issue is related to an uncontrolled search path in the BIOS update software, which may allow an authenticated user to potentially...
Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-12357)
Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...
Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-12360)
Out of bounds read in the firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 ...
Missing Linux Kernel mitigations for 'Cross-Thread Return Address Predictions' hardware vulnerability (AMD-SB-1045)
The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-24513)
Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
New Flaw in Acer Laptops Could Let Attackers Disable Secure Boot Protection
Acer has released a firmware update to address a security vulnerability that could be potentially weaponized to turn off UEFI Secure Boot on affected machines. Tracked as CVE-2022-4020, the high-severity vulnerability affects five different models that consist of Aspire A315-22, A115-21, and...
AMD Graphics Driver Vulnerabilities – November 2022
Bulletin ID: AMD-SB-1029 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD received reports of vulnerabilities potentially affecting some AMD Graphics products. Refer to the CVE Details section for information about each CVE. CVE...
HPESBHF04374 rev.2 - Certain HPE Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL170r Gen9 Server - Prior to v3.0408-04-2022 HPE ProLiant XL190r Gen9 Server - Prior to v3.0408-04-2022 HPE ProLiant XL230a Gen9 Server - Prior to v3.0408-04-202...
3rd Generation Intel® Xeon® Scalable Processors Advisory
Summary: A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33117 Description: Improper access control for...
HPESBST04324 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 170r Gen10 Server - Prior to 2.6605172022 - Use BIOS family U38 HPE SimpliVity 190r Gen10 Server - Prior to 2.6605172022 - Use BIOS family U38 HPE SimpliVity...
HPESBHF04326 rev.3 - HPE Superdome Flex, Superdome Flex 280, Integrity MC990 X, and SGI UV 300 Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server - Prior to 5.2.16 BIOS in product bundle 2022.06 HPE Superdome Flex Server - Prior to 3.55.8 HPE Superdome Flex 280 Server - Prior to 1.35.12 SG...
HPESBST04321 rev.1 - Certain HPE Storage Products Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to 2.6605172022 - Use BIOS family U32. HPE StoreEasy 1560 Storage - Prior to 2.6605172022 - Use BIOS family U33. HPE StoreEasy 1660 Expand...
