CVE-2023-35061

Summary: CVE-2023-35061 refers to improper initialization in the Intel PROSet/Wireless and Intel Killer Wi-Fi software prior to version 22.240, potentially allowing an unauthenticated user to disclose information via adjacent access. What’s affected: Intel PROSet/Wireless and Killer Wi-Fi softwar...

CVE-2023-34983

CVE-2023-34983: Improper input validation in Intel PROSet/Wireless and Intel Killer Wi‑Fi software before version 22.240 can allow an unauthenticated user to cause denial of service via adjacent access. Affected products include Intel PROSet/Wireless Wi‑Fi software and Intel Killer Wi‑Fi software...

CVE-2023-32642

Intel advisory INTEL-SA-00947 technical details present CVE-2023-32642: vulnerability in Intel PROSet/Wireless and Killer Wi‑Fi software prior to 22.240 may allow an unauthenticated user to cause denial of service via adjacent access. Affected products include Intel PROSet/Wireless Wi‑Fi and Kill...

CVE-2023-25951

Intel PROSet/Wireless and Intel Killer Wi‑Fi software contain an improper input validation vulnerability (CVE-2023-25951) that could enable local privilege escalation. Affected products are Intel PROSet/Wireless Wi‑Fi software and Intel Killer Wi‑Fi software with versions before 22.240. The root ...

CVE-2023-28720

CVE-2023-28720 affects Intel PROSet/Wireless and Intel Killer Wi‑Fi software prior to 22.240. Root cause: improper initialization. Impact: unauthenticated user may cause denial of service via adjacent access. Remediation: update PROSet/Wireless to 22.240+ and Killer Wi‑Fi to 3.1423.712+ (as per I...

CVE-2023-28374

CVE-2023-28374 involves Intel PROSet/Wireless and Killer Wi‑Fi software prior to version 22.240, with improper input validation that may allow an unauthenticated user to cause a denial of service via adjacent access. The Intel advisory confirms affected products (Intel PROSet/Wireless and Intel K...

CVE-2023-33875

CVE-2023-33875 affects Intel PROSet/Wireless and Intel Killer Wi‑Fi software prior to version 22.240. The root cause is improper access control that could allow an unauthenticated, local attacker to cause a denial of service. Intel’s advisory (Intel-SA-00947) specifies affected products and platf...

CVE-2023-25174

CVE-2023-25174 affects Intel Chipset Driver Software prior to 10.1.19444.8378. The issue is improper access control that may let an authenticated user escalate privileges via local access. Vulnerability details and CVSS indicate LOCAL, LOW/HIGH complexities with high impact on confidentiality, in...

CVE-2023-28739

The CVE-2023-28739 issue affects Intel® Chipset Driver Software before version 10.1.19444.8378. The Intel advisory describes a vulnerability caused by incorrect default permissions that may allow an authenticated user to escalate privileges via local access. Impact is local escalation of privileg...

CVE-2023-31189

CVE-2023-31189 refers to improper authentication in Intel OpenBMC firmware for some Intel Server Product OpenBMC prior to version egs-1.09, enabling an authenticated local user to escalate privileges. The issue is rooted in authentication weaknesses within the OpenBMC firmware and is limited to l...

CVE-2023-25945

CVE-2023-25945 affects Intel® OFU software prior to version 14.1.31. The issue is a protection mechanism failure that may allow an authenticated user to escalate privileges via local access. Impact is described as local privilege escalation with high confidentiality/integrity/availability impact ...

CVE-2023-32280

CVE-2023-32280 affects Intel Server OpenBMC firmware prior to egs-1.05. Root cause: insufficiently protected credentials, enabling an unauthenticated user to disclose information over the network. Impact per sources: information disclosure with network access; CVSS v3.1 base score 5.3 (AV:N/AC:L/...

CVE-2023-41231

CVE-2023-41231 affects Intel’s ACAT software prior to version 2.0.0. The vulnerability stems from incorrect default permissions, enabling an authenticated user on local access to potentially escalate privileges. The issue is documented with CVSS v3.1 scores: base 7.8 (NVD) and 6.7 (Intel CNA) wit...

CVE-2023-30767

CVE-2023-30767 affects Intel® Optimization for TensorFlow prior to version 2.13.0. The root cause is improper buffer restrictions/bounds checking, which may allow an authenticated local user to escalate privileges. Documented impact includes local elevation of privilege with confidential/integrit...

CVE-2023-28396

CVE-2023-28396 concerns Intel Thunderbolt Controllers. The issue is due to improper access control in the firmware of some Intel Thunderbolt Controllers, allowing a privileged user local access denial of service. Affected are Thunderbolt firmware versions prior to 41. Remediation is to update to ...

CVE-2023-26591

CVE-2023-26591 concerns Intel Thunderbolt™ DCH drivers for Windows prior to version 88, where an unchecked return value in the driver code may allow an unauthenticated user with physical access to cause a denial of service. Affected product: Intel Thunderbolt DCH driver for Windows before 88. Rem...

CVE-2023-27303

CVE-2023-27303 affects Intel Thunderbolt DCH drivers for Windows prior to version 88. The vulnerability arises from improper access control, potentially allowing an authenticated local user to disclose information. Intel recommends updating to driver version 88 or later (product: Intel Thunderbol...

CVE-2023-26596

CVE-2023-26596 affects Intel Thunderbolt DCH drivers for Windows prior to version 88. Description: improper access control could allow an authenticated local user to enable denial of service. Impact is local DoS without requiring network access; affected component is the Intel Thunderbolt DCH dri...

CVE-2023-26592

CVE-2023-26592 describes a deserialization vulnerability in Intel’s Thunderbolt DCH drivers for Windows prior to version 88, which may allow an authenticated local user to cause a denial of service. Affected product: Intel Thunderbolt DCH driver for Windows before 88. Impact : possible DoS via lo...

CVE-2023-27307

The CVE-2023-27307 issue affects Intel(R) Thunderbolt(TM) DCH drivers for Windows prior to version 88. The root cause is improper buffer restrictions in the driver, potentially allowing an authenticated local user to disclose information. Affected product: Intel Thunderbolt DCH drivers for Window...