CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36276

CVE-2024-36276 affects Intel® CIP software before version 2.4.10852. The root cause is insecure inherited permissions, which may allow an authenticated user to escalate privileges via local access. Affected product: Intel® CIP software. Impact per document: local privilege escalation with high co...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36253

CVE-2024-36253 affects Intel® SDP Tool for Windows, with an issue described as uncontrolled search path, potentially enabling privilege escalation for an authenticated user with local access. The entry covers all versions of the Intel SDP Tool for Windows. Multiple sources corroborate the vulnera...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-37024

CVE-2024-37024 affects Intel ACAT for Windows prior to 3.11.0. The issue is an uncontrolled search path that may let an authenticated local user escalate privileges. Impacted component: Intel ACAT software (Windows). Remediation: update to version 3.11.0 or later as recommended by Intel. Other so...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39609

CVE-2024-39609 concerns improper access control in the UEFI firmware of Intel Server Board M70KLP (and related Intel Server Boards). The Red Hat and Intel advisories identify the root cause as improper access control in UEFI, enabling a privileged user to potentially escalate privileges via local...

CVE-2024-39811

CVE-2024-39811 affects Intel Server M20NTP Family UEFI firmware. The root cause is improper input validation in the UEFI firmware, which may allow a privileged user to escalate privileges via local access. The vulnerability is documented with local attack vector and high-impact CVSS metrics (3.1:...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-40885

CVE-2024-40885 concerns use-after-free in the UEFI firmware of Intel Server M20NTP BIOS. The vulnerability, exploitable via local access with high privileges, could enable privilege escalation. Intel’s advisories and related entries (Intel SA-01175 and vendor security pages) indicate affected Int...

CVE-2024-40885

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Improper input validation in UEFI firmware in some IntelR Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Summary: CVE-2024-41167 concerns improper input validation in the UEFI firmware of Intel Server Board M10JNP2SB Family, potentially allowing a locally privileged user to escalate privileges. The issue is documented within a broader Intel advisory tier that lists several related CVEs (e.g., CVE-20...

CVE-2024-31154

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31154

CVE-2024-31154 affects Intel Server Board S2600BPBR UEFI firmware (and related S2600BP family). It stems from improper input validation in the UEFI, which could allow a privileged local attacker to escalate privileges. Intel’s advisory (Intel-SA-01175) confirms the broader family impact and recom...