CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

CVE-2023-23696

Dell Command Intel vPro Out of Band prior to 4.3.1 is affected by an Improper Authorization vulnerability (CVE-2023-23696). A locally authenticated attacker could potentially write arbitrary files to the system. Affected software is Dell Command Intel vPro Out of Band; remediation is to upgrade t...

PT-2023-1580 · Dell · Dell Command | Intel Vpro Out Of Band

Name of the Vulnerable Software and Affected Versions: Dell Command Intel vPro Out of Band versions prior to 4.3.1 Description: The issue is related to an Improper Authorization vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to write arbitrary...

Malicious code in vpro-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-943 Malicious code in vpro-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Intel PROSet Wireless WiFi, Intel vPro CSME WiFi and Killer WiFi Advisory - Lenovo Support US

No description provided...

The vulnerability of network connection tools such as Intel PROSet/Wireless WiFi, Intel vPro CSME WiFi, and Killer WiFi allows a malicious actor to cause service interruptions.

The vulnerability of network connection tools such as Intel PROSet/Wireless WiFi, Intel vPro CSME WiFi, and Killer WiFi is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2022-26047

Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...

CVE-2022-26047

Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...

CVE-2022-26047

CVE-2022-26047 affects Intel® PROSet/Wireless WiFi firmware prior to 22.140, Killer™ WiFi firmware prior to 3.1122.3158, and the associated UEFI 2.2.14.22176.2. The root cause is improper input validation in certain Intel PROSet/Wireless WiFi, Intel vPro® CSME WiFi, and Killer™ WiFi components, w...

CVE-2022-26047

Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...

PT-2022-5918 · Intel · Intel Proset/Wireless Wifi +2

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions affected versions not specified Intel vProR CSME WiFi versions affected versions not specified KillerTM WiFi versions affected versions not specified Description: The issue is related to improper input...

Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi and Killer™ WiFi Advisory

Summary: A potential security vulnerability in some Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi and Killer™ WiFi products may allow denial of service. Intel is releasing a firmware update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26047 Description:...

Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi and Killer™ WiFi May 2021 Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® PROSet/Wireless WiFi and Intel vPro® Converged Security and Management Engine CSME WiFi and Killer™ WiFi which may allow denial of service. Intel is releasing firmware and software updates to mitigate these...

Intel® PROSet and Wireless WiFi, Intel vPro® CSME WiFi, and Intel® Killer™ WiFi Advisory - Lenovo Support US

No description provided...

Intel Adds Hardware-Enabled Ransomware Detection to 11th Gen vPro Chips

Intel and Cybereason have partnered to build anti-ransomware defenses into the chipmaker's newly announced 11th generation Core vPro business-class processors. The hardware-based security enhancements are baked into Intel's vPro platform via its Hardware Shield and Threat Detection Technology TDT...

PT-2020-17188 · Urve · Urve

Name of the Vulnerable Software and Affected Versions: URVE Build 24.03.2020 Description: An issue was discovered in URVE. By using the " internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0%3bpowershell+-c+" substring, it is possible to execute a Powershell command and redirect its output to...

com.erudika:para-jar (=1.31.0), com.erudika:para-server (=1.31.0) +82 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (=5.1.0.RELEASE)

org.springframework.security:spring-security-core MAVEN version =5.1.0.RELEASE is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.erudika:para-jar =1.31.0 - com.erudika:para-serv...

Input validation

Insufficient input validation in system firmware for IntelR Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access...