PT-2020-4365

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper authentication in some Intel Server Boards, Server Systems, and Compute Modules, which may allow an authenticated use...

PT-2020-4114

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow in the subsystem for some Intel Server Boards, Server Systems, and Compute Modules. This buffer overflow is...

PT-2020-4190

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 2.45 Description: The issue is related to improper access control in the bootloader, which may allow a privileged user to enable escalation of privilege via local acces...

PT-2020-4118

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper authentication in some Intel products, which may allow an unauthenticated user to potentially enable escalation of...

PT-2020-4346

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow due to the lack of input size validation, which may allow a privileged user to potentially enable escalation...

PT-2020-4113

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4349

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a lack of input data sanitization measures in the software of some Intel Server Boards, Server Systems, and Compute Modules...

PT-2020-4117

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a heap-based overflow that may allow an authenticated user to potentially enable escalation of privilege via local access. It ...

PT-2020-4116

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to incorrect execution-assigned permissions in the file system. This may allow an authenticated user to potentially enable...

Code injection

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...

CVE-2018-3682

CVE-2018-3682 affects Intel server BMC firmware on server boards, compute modules, and server systems. The vulnerability allows an attacker with administrative privileges to perform unauthorized read/write operations on the SMBUS, exposing confidentiality, integrity, and availability impacts. CVS...

BMC Firmware Vulnerability Intel Server Boards, Compute Modules and Systems

Summary: BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS. • 8.2 High CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected products: Product Type | Product Name | MM...