CVE-2020-0536: Improper Input Validation

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2020-0586: Improper Initialization

Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0537: Improper Input Validation

Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access...

CVE-2020-0527: Undefined Security Weakness

Insufficient control flow management in firmware for some IntelR Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-13238

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...

CVE-2020-13238

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...

Design/Logic Flaw

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...

CVE-2020-13238

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...

CVE-2020-13238

CVE-2020-13238 affects Mitsubishi Electric MELSEC iQ-R Series PLCs. A specially crafted, unauthenticated network packet can cause an uncontrolled resource consumption (DoS) at the Ethernet port, leading to a halt of the industrial process. Recovery requires physical access to the PLC. Affected de...

PT-2020-13388

Name of the Vulnerable Software and Affected Versions Mitsubishi MELSEC iQ-R Series PLCs version 33 Description The issue allows attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, consuming excessive CPU time and resulting in a denial of servic...

CVE-2020-13238: Uncontrolled Resource Consumption

Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to...

PT-2020-4241

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32, 14.0.33 IntelR TXE versions prior to 3.1.75, 4.0.25 Description: The issue is related to a path traversal vulnerability in the Intel Dynamic Application Loader DAL...

PT-2020-4144

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.77 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR TXE...

PT-2020-4052

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is caused by insufficient input validation in the DAL subsystem,...

PT-2020-4053

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in the Intel Active Managemen...

PT-2020-4050

Name of the Vulnerable Software and Affected Versions: IntelR TXE versions before 3.175 IntelR TXE versions before 4.0.25 Description: The issue is related to improper access control in the IntelR TXE subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege...

PT-2020-4145

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in the Intel Active Managemen...

PT-2020-4046

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in IntelR AMT, which may allo...

PT-2020-4057

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 11.8.77 IntelR AMT and IntelR ISM versions before 11.12.77 IntelR AMT and IntelR ISM versions before 11.22.77 IntelR AMT and IntelR ISM versions before 12.0.64 Description: The issue is related to a u...

PT-2020-4049

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in the Intel Active Managemen...