CVE-2017-8227

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices expose a credential-bruteforce risk via ONVIF: account lockout is bypassed, allowing credential guesswork and potential takeover. Root cause is a vulnerable ONVIF authentication path in the binary (sonia) that does not enforce the 5-minute timeou...

CVE-2017-8230

On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrativ...

CVE-2017-8226

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...

Input validation

Insufficient session validation in the service API for IntelR RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Input validation

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-11125: Improper Input Validation

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0157: Improper Input Validation

Insufficient input validation in the IntelR SGX driver for Linux may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-11129: Out-of-bounds Read

Out of bound read/write in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11126: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pointer corruption in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11123: Improper Input Validation

Insufficient session validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0130: Improper Neutralization of Input During Web Page Generation

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-0128: Undefined Security Weakness

Improper permissions in the installer for IntelR Chipset Device Software INF Update Utility before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access...

CVE-2019-11117: Undefined Security Weakness

Improper permissions in the installer for IntelR Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-0164: Undefined Security Weakness

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11124: Out-of-bounds Read

Out of bound read/write in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11128: Improper Input Validation

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11127: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0136: Undefined Security Weakness

Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2018-12147: Improper Input Validation

Insufficient input validation in HECI subsystem in IntelR CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access...