CVE-2020-8751: Undefined Security Weakness

Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, IntelR TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-8744: Improper Initialization

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-24525: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8752: Out-of-bounds Write

Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access...

Mitsubishi Electric MELSEC iQ-R Series

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R series Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service condition for the affected...

CVE-2020-12332: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12337: Undefined Security Weakness

Improper buffer restrictions in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12306: Incorrect Default Permissions

Incorrect default permissions in the IntelR RealSenseTM D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8755: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-8761: Inadequate Encryption Strength

Inadequate encryption strength in subsystem for IntelR CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-12346: Incorrect Default Permissions

Improper permissions in the installer for the IntelR Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12320: Uncontrolled Search Path Element

Uncontrolled search path in IntelR SCS Add-on for Microsoft SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8694: Undefined Security Weakness

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-8764: Undefined Security Weakness

Improper access control in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8693: Undefined Security Weakness

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0584: Buffer Copy without Checking Size of Input

Buffer overflow in firmware for IntelR SSD DC P4800X and P4801X Series, IntelR OptaneTM SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access...

CVE-2019-11121: Incorrect Permission Assignment for Critical Resource

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12326: Improper Initialization

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12327: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12314: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...