Intel Chipset Device Software < 10.1.19444.8378 Escalation of Privilege

The version of Intel Chipset Device Software installed on the remote Windows host is prior to 10.1.19444.8378. It is, therefore, affected by multiple vulnerabilities: - Due to an uncontrolled search path element, an authenticated, local attacker can elevate their privileges. CVE-2023-28388,...

Intel Chipset Device Software Installed (Windows)

Binary data intelchipsetdevicesoftwarewininstalled.nbin...

CVE-2023-28388

Uncontrolled search path element in some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28388

Uncontrolled search path element in some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path element in some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28388

Uncontrolled search path element in some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Chipset Device Software Advisory

Summary: A potential security vulnerability in some Intel® Chipset Device Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-28388 Description: Uncontrolled search path element in some...

Important: Red Hat Security Advisory: qatzip security and bug fix update

An update for qatzip is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

HPESBHF04441 rev.1 - HPE Apollo, XL Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to SPS 04.04.04.300 HPE ProLiant XL220n Gen10 Plus Server - Prior to SPS 04.04.04.300 HPE ProLiant XL290n Gen10 Plus Server - Prior t...

Intel DSA 安全漏洞

Intel DSA is a driver update tool. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must. A security vulnerability exists in Intel DSA versions prior to 22.4.26, which ste...

2023.1 IPU Intel Chipset Firmware Advisory - Lenovo Support US

No description provided...

HPESBHF04415 rev.2 - HPE ProLiant DL/ML/Microserver Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Plus server -Prior to 04.04.04.300 - CVE-2022-36348 HPE ProLiant DL380 Gen10 Plus server -Prior to 04.04.04.300 - CVE-2022-36348 HPE ProLiant DL110...

HPESBHF04420 rev.2 - HPE StoreEasy Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Escalation of Privilege

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 04.04.04.300 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 04.04.04.300 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04435 rev.2 - HPE Synergy Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 04.04.04.300 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-36348 |...

HPESBHF04429 rev.2 - HPE ProLiant DX Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 04.04.04.300 HPE ProLiant DX380 Gen10 Plus server - Prior to 04.04.04.300 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

Security Bulletin: Vulnerabilities in Intel Chipset affect IBM Cloud Pak System (CVE-2021-0060, CVE-2021-0147, CVE-2021-33080)

Summary Vulnerabilities in Intel Chipset affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2021-0060 DESCRIPTION: Intel SPS could allow a physical attacker to gain elevated privileges on the system, caused by insufficient...

Vulnerabilities fixed in Dell PowerEdge

Intel has fixed vulnerabilities in chipset firmware as used by Dell PowerEdge servers. A local malicious party could potentially exploit the vulnerabilities to obtain elevated privileges. The vulnerability with reference CVE-2021-33068 allows an authenticated remote malicious party additionally...

CVE-2021-0147

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...

Input validation

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0147

Improper locking in the Power Management Controller PMC for some Intel Chipset firmware before versions pmcfwlbgc1-21ww02a and pmcfwlbgb0-21ww02a may allow a privileged user to potentially enable denial of service via local access...