778 matches found
Improper access control
Improper access control in BIOS firmware for some IntelR NUC 8 Compute Elements before version CBWHL357.0096 may allow a privileged user to potentially enable escalation of privilege via local access...
Buffer overflow
Improper buffer restrictions in BIOS firmware for some IntelR NUC Boards, IntelR NUC 8 Boards, IntelR NUC 8 Rugged Boards and IntelR NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access...
Race condition
Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-21198
Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
Improper access control
Improper access control in BIOS firmware for some IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access...
Default configuration
Insecure default variable initialization in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow an authenticated user to potentially enable denial of service via local access...
Input validation
Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...
Improper access control
Improper access control in BIOS firmware for some IntelR NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of privilege via local access...
Input validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
Input validation
Improper input validation in BIOS firmware for some IntelR NUC 11 Performance kits and IntelR NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access...
Authentication flaw
Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...
Input validation
Improper input validation in BIOS firmware for some IntelR NUC Boards, IntelR NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access...
Input validation
Improper input validation in BIOS firmware for some IntelR NUC 11 Compute Elements before version EBTGL357.0065 may allow a privileged user to potentially enable escalation of privilege via local access...
Authentication flaw
Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26006
CVE-2022-26006 describes an vulnerability in the BIOS firmware for some Intel processors caused by improper input validation, which could allow a privileged user to escalate privileges via local access. The issue is documented by Intel under INTEL-SA-00688 and is reflected in Nessus/F5 advisories...
CVE-2022-21198
Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-26006
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-21198
Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-21198
CVE-2022-21198 is a TOCTOU race condition in the BIOS firmware of some Intel processors allowing escalation of privilege via local access. Affected are Intel BIOS/IPU firmware implementations referenced in Intel’s INTEL-SA-00688 advisory, with CVSS vectors indicating local attack, low to moderate...