SUSE-SU-2020:3349-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issue: - CVE-2020-12321: Updated the Intel Bluetooth firmware for buffer overflow security bugs bsc1178671...

Saia Burgess Controls PCD Controller Hard-coded Password Vulnerability

OVERVIEW Independent researcher Artyom Kurbatov has identified a hard-coded password vulnerability in Saia Burgess Controls’s family of PCD controllers. Saia Burgess Controls has produced a new firmware version to mitigate this vulnerability. Artyom Kurbatov has tested the new firmware version to...

SUSE-SU-2020:3330-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issue: - CVE-2020-12321: Updated the Intel Bluetooth firmware for buffer overflow security bugs bsc1178671...

Intel BIOS Platform Sample Code Advisory - Lenovo Support US

No description provided...

Vulnerability fixed in EcoStruxure Control Expert

A vulnerability has been fixed that could cause a crash of the PLC simulator in EcoStruxure Control Expert software when a specially crafted request is received via Modbus. Schneider Electric has made available a firmware update that fixes the vulnerability. For more information, see:...

Intel NUC - Privilege Escalation Vulnerability

Document Title: =============== Intel NUC - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2267 Source: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414.html News:...

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24525

CVE-2020-24525 describes insecure inherited permissions in the firmware update tool for certain Intel NUCs, which may let an authenticated local user escalate privileges. The Intel advisory Intel-SA-00414 publicly details this CVE alongside related NUC vulnerabilities and recommends updating to t...

MELSEC iQ-R Series CPU Modules vulnerable to uncontrolled resource consumption

Overview MELSEC iQ-R series CPU modules provided by Mitsubishi Electric Corporation contain an uncontrolled resource consumption vulnerability CWE-400. According to the developer, in case of "To Use or Not to Use Web Server Settings" in the parameter of CPU modules are set to "Not Use", this issu...

CVE-2020-8695

A vulnerability was found in Intel's implementation of RAPL Running Average Power Limit. An attacker with a local account could query the power management functionality to intelligently infer SGX enclave computation values by measuring power usage in the RAPL subsystem. Mitigation Until a firmwar...

Intel® SSD Advisory

Summary: Potential security vulnerabilities in multiple Intel® Solid State Drive SSD products may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVE ID: CVE-2020-12309 Description: Insufficiently protected...

HPESBHF04059 rev.1 - HPE Servers with Intel Processors with the Intel Running Average Power Limit (RAPL) Interface, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade Prior to system ROM v1.40 HPE ProLiant MicroServer Gen10 Plus Prior to system ROM v2.20 HPE ProLiant DL20 Gen10 Server Prior to system ROM v2....

Intel® Server Board S2600ST & S2600WF Advisory

Summary: A potential security vulnerability in the Intel® Server Board S2600ST & S2600WF families may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0572 Description: Improper input validation in...

Intel® PMC Advisory

Summary: A potential security vulnerability in the Power Management Controller PMC for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0599 Description: Improper access...

Intel® Ethernet 700 Series Controller Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8693 Description: Improper buff...

Intel® ADAS IE Advisory

Summary: A potential security vulnerability in the Intel® Advanced Driver Assistance Systems Innovation Engine ADAS IE firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12323 Description...

Vulnerabilities identified in GNU/Linux subsystem of Siemens SIMATIC S7-1500 CPU

Vulnerabilities have been identified in the GNU/Linux subsystem of Siemens SIMATIC S7-1500 CPU. The vulnerabilities allow a malicious person able to perform attacks leading to the following categories of damage: Denial-of-Service DoS. Manipulation of data Circumvention of security measure Remote...