CVE-2020-24512: Observable Discrepancy

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24511: Exposure of Resource to Wrong Sphere

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0077: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR VTuneTM Profiler before version 2021.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0086: Observable Discrepancy

Observable response discrepancy in floating-point operations for some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

PT-2021-12811

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions before 11.8.86 IntelR CSME versions before 11.12.86 IntelR CSME versions before 11.22.86 IntelR CSME versions before 12.0.81 IntelR CSME versions before 13.0.47 IntelR CSME versions before 13.30.17 IntelR CSME versions...

PT-2021-12889

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 20.11.50.9 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

PT-2021-11040

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions before SPS E3 05.01.04.300.0 IntelR SPS versions before SPS SoC-A 05.00.03.091.0 IntelR SPS versions before SPS E5 04.04.04.023.0 IntelR SPS versions before SPS E5 04.04.03.263.0 Description: The issue is related to...

CVE-2020-24486: Improper Input Validation

Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12288: Undefined Security Weakness

Protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12358: Out-of-bounds Write

Out of bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0100: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8704: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in a subsystem in the IntelR LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0054: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0094: Improper Link Resolution Before File Access

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0074: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-11034

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards, Server Systems and Compute Modules versions prior to 2.48.ce3e3bd2 Description: The issue is related to an out of bounds write in the BMC firmware, which may allow an authenticated user to potentially enable escalation o...

CVE-2021-0134: Improper Input Validation

Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

CVE-2020-12291: Uncontrolled Resource Consumption

Uncontrolled resource consumption in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-12914

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB versions prior to EFI BIOS 7215, BMC 8100.01.08 Description: The issue is related to an out of bounds write in the BMC firmware, which may allow an unauthenticated user to potentially enable a denial of service v...

CVE-2021-0097: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...