CVE-2018-18095: Improper Authentication

Improper authentication in firmware for IntelR SSD DC S4500 Series and IntelR SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access...

PT-2019-2797

Name of the Vulnerable Software and Affected Versions IntelR Processor Diagnostic Tool versions prior to 4.1.2.24 Description The issue is related to improper access control in the IntelR Processor Diagnostic Tool, which may allow an authenticated user to enable escalation of privilege, informati...

PT-2019-2813

Name of the Vulnerable Software and Affected Versions IntelR SSD DC S4500 Series versions before SCV10150 IntelR SSD DC S4600 Series versions before SCV10150 Description The issue is related to improper authentication in the firmware, which may allow an unprivileged user to potentially enable...

PT-2019-4041

Name of the Vulnerable Software and Affected Versions i40e driver for IntelR Ethernet 700 Series Controllers versions prior to 2.8.43 Description The issue is caused by insufficient input validation in the i40e driver, which may allow an authenticated user to potentially enable a denial of servic...

Input validation

Insufficient session validation in the service API for IntelR RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Input validation

Insufficient input validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2018-12147: Improper Input Validation

Insufficient input validation in HECI subsystem in IntelR CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 and Intel® Trusted Execution Engine Firmware before version 3.1.55 may allow a privileged user to potentially enable escalation of privileges via local access...

CVE-2019-0130: Improper Neutralization of Input During Web Page Generation

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-11126: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pointer corruption in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11119: Undefined Security Weakness

Insufficient session validation in the service API for IntelR RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11117: Undefined Security Weakness

Improper permissions in the installer for IntelR Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11124: Out-of-bounds Read

Out of bound read/write in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11127: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-11123: Improper Input Validation

Insufficient session validation in system firmware for IntelR NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access...

CVE-2019-0164: Undefined Security Weakness

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0128: Undefined Security Weakness

Improper permissions in the installer for IntelR Chipset Device Software INF Update Utility before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access...

PT-2019-8870

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.21.55 IntelR Server Platform Services versions prior to 4.0 IntelR Trusted Execution Engine Firmware versions prior to 3.1.55 Description The issue is related to insufficient input validation in the HECI...

CVE-2019-0136: Undefined Security Weakness

Insufficient access control in the IntelR PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2019-0157: Improper Input Validation

Insufficient input validation in the IntelR SGX driver for Linux may allow an authenticated user to potentially enable a denial of service via local access...