PT-2023-27337

Name of the Vulnerable Software and Affected Versions IntelR NUC BIOS firmware affected versions not specified Description The issue is related to improper buffer restrictions in the BIOS firmware, which may allow a privileged user to enable information disclosure via local access. Recommendation...

CVE-2022-24379: Improper Input Validation

Improper input validation in some IntelR Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28723: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-34431: Improper Input Validation

Improper input validation in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22313: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-28376: Out-of-bounds Read

Out-of-bounds read in the firmware for some IntelR E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-33945: Improper Input Validation

Improper input validation in some IntelR Server board and IntelR Server System BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28377: Improper Authentication

Improper authentication in some IntelR NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40540: Non-Transparent Sharing of Microarchitectural Resources

Non-Transparent Sharing of Microarchitectural Resources in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-32658: Unquoted Search Path or Element

Unquoted search path in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32661: Improper Authentication

Improper authentication in some IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27306: Improper Initialization

Improper Initialization in firmware for some IntelR OptaneTM SSD products may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-29157: Improper Access Control

Improper access control in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34350: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22305: Integer Overflow to Buffer Overflow

Integer overflow in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-28404: Out-of-bounds Read

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-25949: Uncontrolled Resource Consumption

Uncontrolled resource consumption in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-28378: Improper Authorization

Improper authorization in some IntelR QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-22286

Name of the Vulnerable Software and Affected Versions IntelR RealSenseTM Dynamic Calibration software versions prior to 2.13.1.0 Description The issue is related to an uncontrolled search path element in the software, which may allow an authenticated user to potentially enable escalation of...

CVE-2023-29504: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...