CVE-2020-0578

CVE-2020-0578 affects Intel Modular Server MFS2600KI Compute Module (and variants in related disclosures) with improper conditions check allowing unauthenticated privilege escalation via adjacent access. Intel issued a Product Discontinuation Notice and did not provide mitigations; affected custo...

Intel Fixes High-Severity Flaws in NUC, Discontinues Buggy Compute Module

Intel has stomped out high-severity flaws in its Next Unit Computing NUC mini PC firmware, and in its Modular Server MFS2600KISPP Compute Module. Overall, Intel addressed nine vulnerabilities across six products in its April security update – two of those being high-severity, and the rest being...

CVE-2020-0578: Undefined Security Weakness

Improper conditions check for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0577: Undefined Security Weakness

Insufficient control flow for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0576: Buffer Copy without Checking Size of Input

Buffer overflow in IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of service via adjacent access...

HPESBHF03985 rev.4 - Certain HPE Servers with Intel Xeon SP-based processors, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Server - Prior to ROM v2.30 HPE ProLiant BL460c Gen10 Server Blade - Prior to ROM v2.30 HPE ProLiant DL20 Gen9 Server - Prior to ROM v2.86 - Impacted b...

CVE-2019-0119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow vulnerability in system firmware for IntelR XeonR Processor D Family, IntelR XeonR Scalable Processor, IntelR Server Board, IntelR Server System and IntelR Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local...

Intel Firmware 2018.4 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel firmware may allow for escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12201 Description:...

CVE-2018-12204

Improper memory initialization in Platform Sample/Silicon Reference firmware IntelR Server Board, IntelR Server System and IntelR Compute Module may allow privileged user to potentially enable an escalation of privilege via local access...

CVE-2018-12204: Improper Initialization

Improper memory initialization in Platform Sample/Silicon Reference firmware IntelR Server Board, IntelR Server System and IntelR Compute Module may allow privileged user to potentially enable an escalation of privilege via local access...

HPESBHF03874 rev.1 - Certain HPE Products using Intel-based Processors, L1 Terminal Fault (L1TF) Speculative Side-channel Vulnerabilities, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL580 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL560 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL380 Gen10 Server - Pri...

Intel Server Board, Server System and Compute Module Access Control Error Vulnerability

Intel Server Board, Compute Module and Server System are all products of Intel Corporation.Intel Server Board is a server motherboard.Compute Module is a compute module.Server System is a server array card. The Server System is a server array card. An access control error vulnerability exists in...

Intel Server Board and Compute Module Trust Management Issues Vulnerability

Intel Server Board and Compute Module are both products of Intel Corporation.Intel Server Board is a server motherboard.Compute Module is a computing module. A trust management issue vulnerability exists in Intel Server Board and Compute Module. An attacker could exploit this vulnerability to...

CVE-2018-12173

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial ...

Input validation

Improper password hashing in firmware in Intel Server Board S7200AP,S7200APR and Intel Compute Module HNS7200AP, HNS7200AP may allow a privileged user to potentially disclose firmware passwords via local access...

CVE-2018-12172

Improper password hashing in firmware in Intel Server Board S7200AP,S7200APR and Intel Compute Module HNS7200AP, HNS7200AP may allow a privileged user to potentially disclose firmware passwords via local access...

CVE-2018-12173

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial ...

CVE-2018-12172

This CVE (CVE-2018-12172) concerns an improper password hashing weakness in firmware for Intel® Server Board Family (S7200AP, S7200APR) and Intel® Compute Module (HNS7200AP, HNS7200AP). The root cause is insecure password handling in the firmware that could allow a privileged local user to potent...

CVE-2018-12172: Undefined Security Weakness

Improper password hashing in firmware in Intel Server Board S7200AP,S7200APR and Intel Compute Module HNS7200AP, HNS7200AP may allow a privileged user to potentially disclose firmware passwords via local access...

CVE-2018-12173: Incorrect Permission Assignment for Critical Resource

Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial ...