PT-2023-14120

Name of the Vulnerable Software and Affected Versions IntelR OFU software versions prior to 14.1.30 Description The issue is related to improper access control in kernel mode driver, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations...

PT-2023-14036

Name of the Vulnerable Software and Affected Versions IntelR OFU software versions prior to 14.1.30 Description The issue is related to improper access control in kernel mode driver, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36391: Incorrect Default Permissions

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40207: Improper Access Control

Improper access control in the IntelR SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-25976: Improper Input Validation

Improper input validation in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-23580: Stack-based Buffer Overflow

Stack-based buffer overflow for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access...

PT-2023-21699

Name of the Vulnerable Software and Affected Versions IntelR Server Board BMC firmware versions prior to 2.90 Description The issue is related to a double free in the firmware, which may allow a privileged user to enable information disclosure via local access. Recommendations For versions prior ...

CVE-2023-25772: Improper Input Validation

Improper input validation in the IntelR Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-14034

Name of the Vulnerable Software and Affected Versions IntelR Connect M Android application versions prior to 1.82 Description The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For...

PT-2023-14518

Name of the Vulnerable Software and Affected Versions IntelR DCM software versions prior to 5.1 Description The issue concerns insecure storage of sensitive information, potentially allowing an authenticated user to enable escalation of privilege via local access. Recommendations For versions pri...

PT-2023-18500

Name of the Vulnerable Software and Affected Versions IntelR Server Board BMC firmware versions prior to 2.90 Description The issue is related to an out of bounds write in the IntelR Server Board BMC firmware, which may allow a privileged user to enable escalation of privilege via local access...

CVE-2022-40974: Incomplete Cleanup

Incomplete cleanup in the IntelR IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-14018

Name of the Vulnerable Software and Affected Versions IntelR QAT drivers for Windows versions prior to 1.9.0 Description The issue is related to incorrect permission assignment for a critical resource in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially...

CVE-2023-24475: Out-of-bounds Read

Out of bounds read in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-25776: Improper Input Validation

Improper input validation in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2022-38103: Insecure Inherited Permissions

Insecure inherited permissions in the IntelR NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34848: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41628: Uncontrolled Search Path Element

Uncontrolled search path element in the HotKey Services for some IntelR NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41687: Insecure Inherited Permissions

Insecure inherited permissions in the HotKey Services for some IntelR NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41610: Improper Authorization

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...