2020.2 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0590 Description: Improper input...

CVE-2019-0126

Insufficient access control in silicon reference firmware for IntelR XeonR Scalable Processor, IntelR XeonR Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Improper access control

Insufficient access control in silicon reference firmware for IntelR XeonR Scalable Processor, IntelR XeonR Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2019-0119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow vulnerability in system firmware for IntelR XeonR Processor D Family, IntelR XeonR Scalable Processor, IntelR Server Board, IntelR Server System and IntelR Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local...

CVE-2019-0126: Undefined Security Weakness

Insufficient access control in silicon reference firmware for IntelR XeonR Scalable Processor, IntelR XeonR Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

PT-2019-2193

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processor, Intel Xeon Processor D Family affected versions not specified Description The issue is related to insufficient access control in the silicon reference firmware, which may allow a privileged user to potentially...

PT-2019-2353

Name of the Vulnerable Software and Affected Versions IntelR XeonR Processor D Family affected versions not specified IntelR XeonR Scalable Processor affected versions not specified IntelR Server Board affected versions not specified IntelR Server System affected versions not specified IntelR...

PT-2018-16112

Name of the Vulnerable Software and Affected Versions Intel Xeon Processor E3 Family versions affected versions not specified Intel Xeon Scalable processors versions affected versions not specified Intel Xeon Processor D Family versions affected versions not specified Description The issue concer...

CVE-2018-3652: Exposure of Sensitive Information to an Unauthorized Actor

Existing UEFI setting restrictions for DCI Direct Connect Interface in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces...

HPSBHF03586 rev. 1 - DCI Policy Update

Potential Security Impact Information disclosure and escalation of privilege via limited physical presence. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel platforms, starting with Skylake, support a USB 3-based debugging interface a.k.a. Direct...