CVE-2020-24507: Improper Initialization

Improper initialization in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-24473: Out-of-bounds Write

Out of bounds write in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24474: Buffer Copy without Checking Size of Input

Buffer overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-0090: Uncontrolled Search Path Element

Uncontrolled search path element in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0001: Observable Discrepancy

Observable timing discrepancy in IntelR IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access...

CVE-2021-0057: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0070: Improper Input Validation

Improper input validation in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0073: Undefined Security Weakness

Insufficient control flow management in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in a subsystem in the IntelR CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0132: Missing Release of Resource after Effective Lifetime

Missing release of resource after effective lifetime in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

CVE-2021-0101: Buffer Copy without Checking Size of Input

Buffer overflow in the BMC firmware for IntelR Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

CVE-2021-0105: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in some IntelR ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access...

CVE-2021-0056: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0133: Undefined Security Weakness

Key exchange without entity authentication in the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2020-12294: Undefined Security Weakness

Insufficient control flow management in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-12906

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: A buffer overflow issue exists in the BMC firmware, potentially allowing an unauthenticated user with adjacent access to escalate privileges...

PT-2021-12920

Name of the Vulnerable Software and Affected Versions: IntelR Security Library versions prior to 3.3 Description: The issue is related to key exchange without entity authentication, which may allow an authenticated user to potentially enable escalation of privilege via network access...

PT-2021-12903

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to path traversal in the BMC firmware, which may allow an unauthenticated user to potentially enable a denial of service via...

PT-2021-12887

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to improper input validation in the BMC firmware, which may allow an unauthenticated user to potentially enable an escalation of...

CVE-2020-24516: Undefined Security Weakness

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...