Vulnerability Spotlight: Intel Raid Web Console 3 denial-of-service bugs

Geoff Serrao of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered two denial-of-service vulnerabilities in the web API functionality of Intel RAID Web Console 3. The Raid Web Console is a web-based application that provides several configuration...

Intel Raid Web Console 3 add server denial-of-service vulnerability

Summary A remote, exploitable denial-of-service vulnerability exists in the web API functionality of Intel Raid Web Console 3. A specially crafted request can lead to a null pointer dereference in the Intel Raid Web Console server. This would result in a denial of service until the user restarts...

Intel Raid Web Console 3 DISCOVERY Denial of Service

Summary An exploitable denial of service vulnerability exists in the web API functionality of Intel Raid Web Console 3. A specially crafted request can cause the LSA.exe service to exit, resulting in a denial of service. A remote unauthenticated attacker can send a malicious POST request to trigg...

The vulnerability of the Intel Raid Web Console 2 installer allows a hacker to increase their privileges.

The vulnerability of the Intel Raid Web Console 2 installer is related to incorrect standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

PT-2020-1975

Name of the Vulnerable Software and Affected Versions Intel Raid Web Console 2 versions all Description The issue is related to improper default permission settings. It may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For Intel Raid W...

PT-2020-1576

Name of the Vulnerable Software and Affected Versions Intel Raid Web Console 2 affected versions not specified Intel RWC 3 for Windows versions prior to 7.010.009.000 Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially...

Intel Raid Web Console 2 Information Disclosure Vulnerability

Intel Raid Web Console 2 is a web-based application from Intel Corporation that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. An information disclosure vulnerability exists in the Web Console in Intel Raid Web Console 2. An attacker cou...

CVE-2018-3696

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access...

CVE-2018-3699

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

CVE-2018-3696

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access...

CVE-2018-3696: Improper Authentication

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access...

PT-2018-16132

Name of the Vulnerable Software and Affected Versions Intel RAID Web Console version v3 for Windows Description The issue allows an unauthenticated user to elevate privilege via remote access due to cross-site scripting in the Intel RAID Web Console for Windows. Recommendations For Intel RAID Web...

CVE-2018-3699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

PT-2018-16129

Name of the Vulnerable Software and Affected Versions Intel RAID Web Console 3 for Windows versions prior to 4.186 Description The issue allows an unprivileged user to potentially gain administrative privileges via local access due to an authentication bypass. Recommendations For versions prior t...