CLSA-2025-1736502911 Fix of 5 CVEs

New microcode update packages from upstream up to 2024-11-12: - Updated microcodes: sig 0x000806f4, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pfmask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig...

CLSA-2024-1729197957 Fix CVE(s): CVE-2024-23984, CVE-2024-24968

New microcode update packages from upstream up to 2024-09-10: - Updated microcodes: sig 0x00090672, pfmask 0x07, 2024-02-22, rev 0x0036, size 224256 sig 0x00090675, pfmask 0x07, 2024-02-22, rev 0x0036, size 224256 sig 0x000906a3, pfmask 0x80, 2024-02-22, rev 0x0434, size 222208 sig 0x000906a4,...

SUSE-SU-2020:3373-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL sidechannel attack SGX bsc1170446 - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 bsc1173594 - CVE-2020-8696: Vector Register...

Microarchitectural Data Sampling speculative side channel

ISSUE DESCRIPTION Microarchitectural Data Sampling refers to a group of speculative sidechannels vulnerabilities. They consist of: CVE-2018-12126 - MSBDS - Microarchitectural Store Buffer Data Sampling CVE-2018-12127 - MLPDS - Microarchitectural Load Port Data Sampling CVE-2018-12130 - MFBDS -...

Intel Firmware Vulnerability

Intel has released recommendations to address vulnerabilities in the firmware of the following Intel products: Management Engine, Server Platform Services, and Trusted Execution Engine. An attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourag...

Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC Industrial PCs, SINUMERIK Panel Control Unit PCU, SIMOTION P320 Vulnerability: Permissions, Privileges, and Access Controls AFFECTED PRODUCTS Siemens reports that the vulnerability affects...

ICSA-17-180-01A_Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC Industrial PCs, SINUMERIK Panel Control Unit PCU, SIMOTION P320 Vulnerability: Permissions, Privileges, and Access Controls UPDATED INFORMATION This updated advisory is a follow-up to the...

Intel Active Management Technology (AMT) does not properly enforce access control

Overview Technologies based on Intel Active Management Technology may be vulnerable to remote privilege escalation, which may allow a remote, unauthenticated attacker to execute arbitrary code on the system. Description CWE-284: Improper Access Control - CVE-2017-5689Intel offers a number of...