CVE-2024-39372

Intel® XTU software for Windows is affected by CVE-2024-39372 due to an uncontrolled search path, potentially allowing an authenticated user to escalate privileges via local access. The issue affects versions prior to 7.14.2.14. Mitigation: update Intel® XTU to version 7.14.2.14 or later. Referen...

CVE-2025-20097

Uncaught exception in OpenBMC Firmware for the IntelR Server M50FCP Family and IntelR Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2025-20097

CVE-2025-20097 : Uncaught exception in OpenBMC Firmware for Intel® Server M50FCP Family and Intel® Server D50DNP Family (pre-release R01.02.0002) may allow an authenticated user to cause a network-enabled denial of service. Affected product scope is limited to these OpenBMC implementations; the r...

CVE-2025-20097

Uncaught exception in OpenBMC Firmware for the IntelR Server M50FCP Family and IntelR Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access...

CVE-2023-29164

CVE-2023-29164 affects Intel Server Board BMC Firmware on S2600WF/S2600ST/S2600BP and M50CYP/D50TNP where an authenticated local user could escalate privileges due to improper access control. The issue is addressed by updating to: S2600WF/ST/BP to 02.01.0017 or later; M50CYP/D50TNP to R01.01.0009...

CVE-2023-29164

Improper access control in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable...

CVE-2023-29164

Improper access control in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable...

CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-2023-31276

CVE-2023-31276 describes a heap-based buffer overflow in the BMC firmware of Intel Server Board families S2600WF/S2600ST/S2600BP (and M50CYP) and D50TNP. Root cause: heap overflow in BMC firmware that may allow escalation of privilege via local access. Affected before: S2600WF/S2600ST/S2600BP bef...

CVE-2023-31276

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-2024-39355

CVE-2024-39355 concerns Intel processors and is described as an improper handling of physical/environmental conditions that could let an authenticated user cause a denial of service via local access. The CVE lists LOCAL attack vector, LOW privileges required, and NO user interaction, with MEDIUM ...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-39355

Improper handling of physical or environmental conditions in some IntelR Processors may allow an authenticated user to enable denial of service via local access...

CVE-2024-25571

CVE-2024-25571 affects Intel® Server Platform Services (SPS) firmware. Reported as an improper input validation in SPS firmware before SPS_E5_06.01.04.059.0, potentially allowing a privileged local attacker to cause a denial of service. Documents list the vulnerability details and the available m...

CVE-2024-25571

Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-25571

Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-28047

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-28047

CVE-2024-28047 concerns improper input validation in UEFI firmware for some Intel processors, enabling a privileged local user to potentially disclose information. Multiple connected sources confirm the root cause is UEFI input validation weakness and the impact is information disclosure via loca...