PT-2020-4056

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions before SPS E3 04.01.04.109.0 IntelR SPS versions before SPS E3 04.08.04.070.0 Description: The issue is related to improper initialization in a subsystem, which may allow an authenticated user to potentially enable...

PT-2020-4241

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 IntelR TXE versions prior to 3.1.75, 4.0.25 Description: The issue is related to a path traversal vulnerability in the Intel Dynamic Application Loader DAL...

PT-2020-4048

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to an out-of-bounds write in a subsystem, which may allo...

PT-2020-4049

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in the Intel Active Managemen...

PT-2020-4144

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR TXE...

PT-2020-4055

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to improper buffer restrictions in a subsystem, which ma...

PT-2020-4242

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelRISM versions prior to 11.8.77 IntelR AMT and IntelRISM versions prior to 11.12.77 IntelR AMT and IntelRISM versions prior to 11.22.77 IntelR AMT and IntelRISM versions prior to 12.0.64 IntelR AMT and IntelRISM versions...

PT-2020-4050

Name of the Vulnerable Software and Affected Versions: IntelR TXE versions before 3.175 IntelR TXE versions before 4.0.25 Description: The issue is related to improper access control in the IntelR TXE subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege...

PT-2020-4058

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 11.8.77 IntelR AMT and IntelR ISM versions before 11.12.77 IntelR AMT and IntelR ISM versions before 11.22.77 IntelR AMT and IntelR ISM versions before 12.0.64 Description: The issue is related to an...

PT-2020-4051

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.76 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 Description: The issue is related to a reversible one-way hash in IntelR CSME, which may allow a privileged user to potentiall...

PT-2020-4000

Name of the Vulnerable Software and Affected Versions: IntelR Innovation Engine versions prior to 1.0.859 Description: The issue is related to insufficient control flow management in the firmware build and signing tool, which may allow an unauthenticated user to potentially enable escalation of...

PT-2020-4053

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in the Intel Active Managemen...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5670)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5670 advisory. - brcmfmac: add subtype check for event handling in data path John Donnelly Orabug: 30776354 CVE-2019-9503 - mwifiex: pcie: Fix memory leak in...

Buffer overflow

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0576: Buffer Copy without Checking Size of Input

Buffer overflow in IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-0558: Undefined Security Weakness

Improper buffer restrictions in kernel mode driver for IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an unprivileged user to potentially enable denial of service via adjacent access...

CVE-2020-0547: Incorrect Default Permissions

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0568: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the IntelR Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-0578: Undefined Security Weakness

Improper conditions check for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0557: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...