CVE-2020-12307: Incorrect Default Permissions

Improper permissions in some IntelR High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24456: Incorrect Default Permissions

Incorrect default permissions in the IntelR Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8746: Integer Overflow or Wraparound

Integer overflow in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-8692: Undefined Security Weakness

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8705: Initialization of a Resource with an Insecure Default

Insecure default initialization of resource in IntelR Boot Guard in IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 3.1.80 and 4.0.30, IntelR SPS versions before E504.01.04.400, E304.01.04.200, SoC-X04.00.04.200...

CVE-2020-12347: Improper Input Validation

Improper input validation in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2020-8750: Use After Free

Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12304: Undefined Security Weakness

Improper access control in Installer for IntelR DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-12309: Insufficiently Protected Credentials

Insufficiently protected credentialsin subsystem in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-8669: Improper Input Validation

Improper input validation in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2020-12316: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access...

CVE-2020-12329: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8691: Undefined Security Weakness

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0572: Improper Input Validation

Improper input validation in the firmware for IntelR Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8753: Out-of-bounds Read

Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-12355: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in IntelR TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-8695: Observable Discrepancy

Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-0591: Undefined Security Weakness

Improper buffer restrictions in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12334: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8698: Exposure of Resource to Wrong Sphere

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...