CVE-2020-8709: Improper Authentication

Improper authentication in socket services for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

SkyArk - Helps To Discover, Assess And Secure The Most Privileged Entities In Azure And AWS

SkyArk is a cloud security project with two mainscanning modules: 1. AzureStealth - Scans Azure environments 2. AWStealth - Scan AWS environments These two scanning modules will discover the most privileged entities in the target AWS and Azure. The Main Goal - Discover The Most Privileged Cloud...

Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules

Intel is warning of a rare critical-severity vulnerability affecting several of its motherboards, server systems and compute modules. The flaw could allow an unauthenticated, remote attacker to achieve escalated privileges. The recently patched flaw CVE-2020-8708 ranks 9.6 out of 10 on the CVSS...

PT-2020-4349

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a lack of input data sanitization measures in the software of some Intel Server Boards, Server Systems, and Compute Modules...

PT-2020-4117

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a heap-based overflow that may allow an authenticated user to potentially enable escalation of privilege via local access. It ...

PT-2020-4116

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to incorrect execution-assigned permissions in the file system. This may allow an authenticated user to potentially enable...

PT-2020-4115

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow due to the lack of input size validation, which could allow a remote attacker to escalate their privileges...

PT-2020-4364

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue exists due to improper input validation in a subsystem, which may allow an authenticated user to potentially enable denial of service via...

PT-2020-4350

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to inadequate authentication in the socket services of Intel's microcode for server boards, server systems, and compute modules...

PT-2020-4352

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer copy without checking the size of the input, which may allow an authenticated user to potentially enable escalation o...

PT-2020-4365

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper authentication in some Intel Server Boards, Server Systems, and Compute Modules, which may allow an authenticated use...

PT-2020-4113

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4346

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow due to the lack of input size validation, which may allow a privileged user to potentially enable escalation...

PT-2020-4344

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 2.45 Description: The issue is related to a buffer overflow in a verification process, which may allow an authenticated user to potentially enable escalation of privile...

PT-2020-4118

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper authentication in some Intel products, which may allow an unauthenticated user to potentially enable escalation of...

PT-2020-4366

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to improper access control in some Intel Server Boards, Server Systems, and Compute Modules. This may allow an authenticated user...

PT-2020-4114

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 1.59 Description: The issue is related to a buffer overflow in the subsystem for some Intel Server Boards, Server Systems, and Compute Modules. This buffer overflow is...

PT-2020-4190

Name of the Vulnerable Software and Affected Versions: Intel Server Boards, Server Systems and Compute Modules versions prior to 2.45 Description: The issue is related to improper access control in the bootloader, which may allow a privileged user to enable escalation of privilege via local acces...

Intel® Server Boards, Server Systems and Compute Modules Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards, Server Systems and Compute Modules may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8708...

PT-2020-3935 · Microsoft · Windows Modules Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Modules Installer affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of objects in memory by Windows Modules Installer. This could allow an attacker to run arbitrary code i...