CVE-2019-11167: Incorrect Permission Assignment for Critical Resource

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2019-4277

Name of the Vulnerable Software and Affected Versions IntelR NUC affected versions not specified Description The issue is related to memory corruption in system firmware, potentially allowing a privileged user to enable escalation of privilege, denial of service, and/or information disclosure via...

CVE-2019-14569: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pointer corruption in system firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-14570: Out-of-bounds Write

Memory corruption in system firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11120: Undefined Security Weakness

Insufficient path checking in the installer for IntelR Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2019-4278

Name of the Vulnerable Software and Affected Versions IntelR NUC affected versions not specified Description The issue is related to pointer corruption in system firmware, which may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information...

PT-2019-4061

Name of the Vulnerable Software and Affected Versions IntelR Smart Connect Technology affected versions not specified Description The issue is related to improper file permissions in the software installer for IntelR Smart Connect Technology, which may allow an authenticated user to potentially...

PT-2019-4059

Name of the Vulnerable Software and Affected Versions IntelR Active System Console versions prior to 8.0 Build 24 Description The issue is related to insufficient path checking in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. ...

CVE-2019-11166: Incorrect Permission Assignment for Critical Resource

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11184: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in specific microprocessors using Intel R DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access...

CVE-2019-0173

Authentication bypass in the web console for IntelR Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access...

Authentication flaw

Authentication bypass in the web console for IntelR Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access...

Input validation

Improper permissions in the software installer for IntelR Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0173: Undefined Security Weakness

Authentication bypass in the web console for IntelR Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access...

CVE-2019-11140: Improper Input Validation

Insufficient session validation in system firmware for IntelR NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11143: Undefined Security Weakness

Improper permissions in the software installer for IntelR Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11148: Undefined Security Weakness

Improper permissions in the installer for IntelR Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11162: Undefined Security Weakness

Insufficient access control in hardware abstraction in SEMA driver for IntelR Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2019-11163: Undefined Security Weakness

Insufficient access control in a hardware abstraction driver for IntelR Processor Identification Utility for Windows before version 6.1.0731 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

PT-2019-3273

Name of the Vulnerable Software and Affected Versions IntelR Raid Web Console 2 affected versions not specified Description The issue is related to an authentication bypass in the web console, potentially allowing an unauthenticated attacker to disclose information via network access. The...