CVE-2022-24382: Improper Input Validation

Improper input validation in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0153: Out-of-bounds Write

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0188: Improper Restriction of Operations within the Bounds of a Memory Buffer

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-33123: Undefined Security Weakness

Improper access control in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0193: Improper Authentication

Improper authentication in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-21131: Undefined Security Weakness

Improper access control for some IntelR XeonR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-21151: Undefined Security Weakness

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0126: Improper Input Validation

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-0194: Undefined Security Weakness

Improper access control in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2021-0155: Unchecked Return Value

Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0154: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2022-0004: Undefined Security Weakness

Hardware debug modes and processor INIT setting that allow override of locks for some IntelR Processors in IntelR Boot Guard and IntelR TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-0005: Cleartext Transmission of Sensitive Information

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...

CVE-2022-21136: Improper Input Validation

Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33108: Improper Input Validation

Improper input validation in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-33082: Improper Removal of Sensitive Information Before Storage or Transfer

Sensitive information in resource not removed before reuse in firmware for some IntelR SSD and IntelR OptaneTM SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2021-33075: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in firmware for some IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...

PT-2022-3027

Name of the Vulnerable Software and Affected Versions IntelR In-Band Manageability software versions prior to 2.13.0 Description The issue is related to improper authentication in the IntelR In-Band Manageability software, which may allow a privileged user to potentially enable escalation of...

PT-2022-3830

Name of the Vulnerable Software and Affected Versions IntelR SSD versions affected versions not specified IntelR OptaneTM SSD versions affected versions not specified IntelR SSD DC Products versions affected versions not specified Description The issue is related to insufficient control flow...

PT-2022-3184

Name of the Vulnerable Software and Affected Versions IntelR Boot Guard and IntelR TXT affected versions not specified Description The issue is related to the implementation of IntelR Boot Guard and IntelR TXT technologies in IntelR processors, which may allow an unauthenticated user to potential...