PT-2023-24832 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: A race condition in the IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: At the moment,...

Intel NUC Competitive Conditions Issue Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the IntelR NUC BIOS firmware. An attacker can exploit the vulnerability to elevate privileges...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the IntelR NUC BIOS firmware that originates from incorrect input validation. An attacker can exploit the vulnerability to elevate privileges...

Missing Linux Kernel mitigations for 'GDS - Gather Data Sampling' hardware vulnerability (Downfall, INTEL-SA-00828)

The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Missing Linux Kernel mitigations for 'Speculative Return Stack Overflow (SRSO)' hardware vulnerability (INCEPTION, AMD-SB-7005)

The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

PT-2023-18452 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper initialization in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable information disclosure via local...

PT-2023-22283 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified Description: The issue concerns the exposure of sensitive information to unauthorized actors in the BIOS firmware of some IntelR NUC devices. This could potentially allow a privileged user to enable...

PT-2023-23700 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper access control in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable denial of service via local access...

PT-2023-13533 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper access control in the BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege vi...

PT-2023-13531 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified Description: The issue is related to improper input validation in BIOS firmware for some IntelR NUC, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-13481 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper buffer restrictions in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via...

HPESBHF04512 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.8007-05-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-41804 |...

HPESBHF04516 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.8007-05-2023 HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.8007-05-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04511 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.8007-05-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-23908 |...

HPESBHF04514 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall),Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.9007-20-2023 HPE ProLiant XL230k Gen10 Server - Prior to 2.9007-20-2023 HPE Apollo 4200 Gen10 Server - Prior to 2.9007-20-2023 HPE...

HPESBHF04510 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.9007-20-2023 HPE Synergy 480 Gen10 Compute Module - Prior to 2.9007-20-2023 HPE Synergy 660 Gen10 Compute Module - Prior ...

HPESBHF04515 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.8007-05-2023 HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.8007-05-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04502 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.8007-05-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

Return Address Security Bulletin

Bulletin ID: AMD-SB-7005 Potential Impact: Data Confidentiality Severity: Medium Summary AMD has received an external report titled ‘INCEPTION’, describing a new speculative side channel attack. The attack can result in speculative execution at an attacker-controlled address, potentially leading ...

PT-2023-14226 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to insufficient control flow management in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable denial of...