PT-2023-9409

Name of the Vulnerable Software and Affected Versions 3rd Generation IntelR XeonR Scalable Processors affected versions not specified Description The issue is related to an incorrect calculation in the microcode keying mechanism, which may allow a privileged user to potentially enable information...

System Management Unit DoS

The vulnerability of the System Management Unit SMU component of AMD processors arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2022-27672

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure...

Intel 2023.1 IPU – BIOS February 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified in some Intel® Processors with Intel® Software Guard Extensions SGX that might allow information disclosure and potential vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT...

CVE-2022-27672: Undefined Security Weakness

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure...

Cross-Thread Return Address Predictions

Bulletin ID: AMD-SB-1045 Potential Impact: Information Disclosure Summary AMD internally discovered a potential vulnerability where certain AMD processors may speculatively execute instructions at an incorrect return site after an SMT mode switch that may potentially lead to information disclosur...

PT-2023-9408 · Intel +4 · Intel Processors +4

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions, which may allow a privileged user to...

PT-2023-9406

Name of the Vulnerable Software and Affected Versions IntelR Atom and Intel Xeon Scalable Processors affected versions not specified Description The issue is related to insufficient granularity of access control in out-of-band management, which may allow a privileged user to potentially enable...

Siemens SIMATIC Industrial Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

3rd Generation Intel® Xeon® Scalable Processors Advisory

Summary: A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-33972 Description: Incorrect calculation in...

2023.1 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors with Intel® Software Guard Extensions SGX may allow information disclosure. Intel is releasing firmware updates to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38090 Description: Improper isolati...

2023.1 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT Authenticated Code Modules ACM for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS updates to mitigate these potential...

2023.1 IPU - Intel® Atom® and Intel® Xeon® Scalable Processors Advisory

Summary: A potential security vulnerability in some Intel® Atom® and Intel® Xeon® Scalable Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21216 Description: Insufficient granularity...

HPESBHF04428 rev.2 - Certain HPE Proliant DX Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX360 Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX380 Gen10 Plus server - Prior to...

HPESBHF04440 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privilege Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL450 Gen10 Server - Prior to 2.7602-09-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-20...

HPESBHF04426 rev.4 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privileges

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.7202-02-2023 U46 ROM Family, - Prior to 2.7601-18-2023 U30 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.7202-02-2023 U46 ROM...

HPESBHF04434 rev.4 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.7602-09-2023 HPE Synergy 480 Gen10 Compute Module - Prior to 2.7602-09-2023 HPE Synergy 660 Gen10 Compute Module - Prior to...

HPESBHF04425 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-00700, 2023.1 IPU – Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage -Prior to 1.7202-02-2023 U46 ROM Family HPE StoreEasy 1860 Storage -Prior to 1.7202-02-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04439 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04433 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21216 |...