CVE-2020-8744: Improper Initialization

Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-12303: Use After Free

Use after free in DAL subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

PT-2020-4943

Name of the Vulnerable Software and Affected Versions: IntelR Board ID Tool version v.1.01 Description: The issue is related to incorrect default permissions in the IntelR Board ID Tool, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is...

CVE-2019-11121: Incorrect Permission Assignment for Critical Resource

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8749: Out-of-bounds Read

Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-12336: Initialization of a Resource with an Insecure Default

Insecure default variable initialization in firmware for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12335: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8694: Undefined Security Weakness

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

PT-2020-4912

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 20.8.30.6 Description: The issue is related to incorrect default permissions, which may allow an authenticated user to potentially enable denial of service via local access. The vulnerability is associated with...

PT-2020-4781

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions prior to 21.110 Description: The issue is related to insufficient control flow management in some IntelR PROSet/Wireless WiFi products. This may allow an unauthenticated user to potentially enable denial o...

PT-2020-4698

Name of the Vulnerable Software and Affected Versions IntelR TXE versions before 3.1.80 IntelR TXE versions before 4.0.30 Description The issue is related to a use after free vulnerability in the Kernel Mode Driver for IntelR TXE, which can be exploited to potentially enable escalation of privile...

PT-2020-4945

Name of the Vulnerable Software and Affected Versions: IntelR Server Board S2600ST and S2600WF families affected versions not specified Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege v...

PT-2020-4913

Name of the Vulnerable Software and Affected Versions: IntelR QAT for Linux versions prior to 1.7.l.4.10.0 Description: The issue is related to insufficiently protected credentials in the IntelR QAT for Linux, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2020-4899

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers. This may allow a privileged user to potentially enabl...

PT-2020-4898

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers affected versions not specified Description: A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or...

PT-2020-4735

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 13.0.40 IntelR CSME versions prior to 13.30.10 Description: The issue is related to inadequate encryption strength in a subsystem, which may allow an unauthenticated user to potentially enable information...

PT-2020-4925

Name of the Vulnerable Software and Affected Versions: IntelR NUCs affected versions not specified Description: The issue is related to insecure inherited permissions in the firmware update tool for some IntelR NUCs. This may allow an authenticated user to potentially enable escalation of privile...

PT-2020-4900

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an out of bounds write in Intel BIOS platform sample code, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4674

Name of the Vulnerable Software and Affected Versions IntelR Client SSDs affected versions not specified IntelR Data Center SSDs affected versions not specified Description The issue is related to insufficient control flow management in the firmware of some Intel SSDs, which may allow an...

PT-2020-4782

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions prior to 21.110 Description: The issue is related to a protection mechanism failure and errors in security settings in Intel PROSet/Wireless WiFi utility, which may allow an authenticated user to potential...