237 matches found
CVE-2021-0093
Incorrect default permissions in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...
Intel BIOS firmware 安全漏洞
Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. The Intel BIOS firmware has a security vulnerability that stems from a potential security flaw in the BIOS firmware of Intel processors. An attacker could...
The vulnerability of Intel BIOS/UEFI processor microprogramming software allows attackers to enhance their privileges and gain unauthorized access to protected information.
The vulnerability of Intel BIOS/UEFI processor microprogramming systems is related to insufficient protection of system data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...
CVE-2021-0096
Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel BIOS Shared SW Architecture 默认配置问题漏洞
Intel BIOS Shared SW Architecture Intel BSSA is a BIOS shared software architecture from Intel Corporation USA. A default configuration issue vulnerability exists in the Intel BIOS Shared SW Architecture DFT that stems from an insecure default variable initialization of the Intel BSSA DFT feature...
Design/Logic Flaw
Out-of-bounds read in the firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2020-24474
Buffer overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-24486
Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...
Input validation
Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...
CVE-2020-24493
Insufficient access control in the firmware for the IntelR 700-series of Ethernet Controllers before version 8.0 may allow a privileged user to potentially enable denial of service via local access...
Intel® SSD Advisory
Summary: Potential security vulnerabilities in multiple Intel® Solid State Drive SSD products may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVE ID: CVE-2020-12309 Description: Insufficiently protected...
Heap overflow
Heap-based buffer overflow in the firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2019-14611
Integer overflow in firmware for IntelR NUCR may allow a privileged user to potentially enable escalation of privilege via local access...
TPM-Fail Attacks Against Cryptographic Coprocessors
Really interesting research: TPM-FAIL: TPM meets Timing and Lattice Attacks, by Daniel Moghimi, Berk Sunar, Thomas Eisenbarth, and Nadia Heninger. Abstract: Trusted Platform Module TPM serves as a hardware-based root of trust that protects cryptographic keys from privileged system and physical...
CVE-2019-11137
Insufficient input validation in system firmware for IntelR XeonR Scalable Processors, IntelR XeonR Processors D Family, IntelR XeonR Processors E5 v4 Family, IntelR XeonR Processors E7 v4 Family and IntelR AtomR processor C Series may allow a privileged user to potentially enable escalation of...
Stack overflow
Stack overflow in IntelR Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access...
Multiple Intel Products Session Authentication Vulnerability
The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A session authentication vulnerability exists in the system firmware of multiple Intel products, which originates from a program's failure to perform sufficient session authentication and can be exploited by a local attacke...
Security update for kernel-firmware (moderate)
openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2019:1770-1 Rating: moderate References: 1136334 1136498 1139383 Cross-References: CVE-2019-9836 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that solves one vulnerability and has two...
Intel Firmware Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-26294 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0119 , CVE-2019-0120 , CVE-2019-0126 Summary Description: Potential security vulnerabilities in Intel firmware may allow for...