CVE-2024-29079

Intel VROC software up to version 8.6.0.3001 is affected by CVE-2024-29079 due to insufficient control flow management, which may allow an authenticated local user to escalate privileges. Affected: Intel® VROC software prior to 8.6.0.3001. Impact is privilege escalation with high confidentiality/...

Intel VROC Software Advisory - Lenovo Support US

No description provided...

Intel® VROC Software Advisory

Summary: Potential security vulnerabilities in some Intel® Virtual RAID on CPU Intel® VROC software may allow escalation of privilege and denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-29079 Description:...

CVE-2024-23489

Uncontrolled search path for some IntelR VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-35003

Path transversal in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31271

Improper access control in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

Path traversal

Path transversal in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34315

Intel VROC software prior to version 8.0.8.1001 contains an incorrect default permissions issue that could allow an authenticated local user to escalate privileges. The CVE-2023-34315 entry is confirmed by Intel’s advisory (INTEL-SA-00953) and NVD/NIST records, which cite a CVSSv3.1 base score of...

PT-2024-2742 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: Intel VROC software versions prior to 8.0.8.1001 Description: The issue is related to improper access control in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This i...

CVE-2022-45112

Improper access control in some IntelR VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25976

Improper input validation in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access...

Default configuration

Incorrect default permissions in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25976

Improper input validation in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-12992 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 7.7.6.1003 Description: The issue is related to a use after free condition in the IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local acces...