RHEL 7 : microcode_ctl (RHSA-2020:5183)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5183 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Information disclosure issue in Intel SGX via RAPL...

Moderate: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red at Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

Intel Active Management Technology Access Control Error Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An Access Control Error vulnerability exists in Intel Active Management Technology versions prior to 1.3.3, which arises from a network system or product that...

Intel AMT Input Validation Error Vulnerability (CNVD-2020-66304)

Intel AMT is an Intel Intel company that resides in hardware that allows remote management functions to be performed. Intel AMT suffers from an input validation error vulnerability that allows privilege escalation to be enabled via local access. No details of the vulnerability are available at th...

Intel AMT and Intel ISM Buffer Overflow Vulnerabilities

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A security vulnerability exists in Intel AMT and Intel ISM that stems from an out-of-bounds read-in subsystem that could allow an unauthenticated user to...

Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391)

Binary data wmiINTEL-SA-00391.nbin...

CentOS: Security Advisory for microcode_ctl (CESA-2020:5083)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391) (remote check)

The Intel Management Engine on the remote host has Active Management Technology AMT enabled, and, according to its self-reported, is a version containing multiple vulnerabilities, including the following: - Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80,...

Trend Micro Security 2020 (Consumer) is vulnerable to arbitrary file deletion

Overview Trend Micro Security 2020 Consumer provided by Trend Micro Incorporated contains an arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges. Trend Micro Incorporated...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause...

The vulnerability of the Intel Active Management Technology implementation arises from a full-integer overflow, allowing an attacker to escalate their privileges.

The vulnerability of the Intel Active Management Technology implementation is due to a full-integer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to cause a service failure

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is caused by a full exploitation of certain conditions. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to enhance their privileges

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Intel Active Management Technology implementation arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to exploit their privileges.

The vulnerability of the Intel Active Management Technology implementation is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows installer of the Intel AMT SDK allows a perpetrator to increase their privileges.

The vulnerability of the Windows installer of the Intel AMT SDK is related to permission handling errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology and Standard Manageability, allowing a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology and Standard Manageability relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the Microsoft Active Directory component of the Cisco Identity Services Engine (ISE) management platform for connections allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft Active Directory component of the Cisco Identity Services Engine ISE management connection policies is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

nishang

This repository is an offensive tool for Windows exploitation, specifically for adding backdoors to Windows systems. It contains a collection of PowerShell scripts that can be used to add various types of backdoors, including constrained delegation backdoors, registry backdoors, and screensaver...