CVE-2024-34153

CVE-2024-34153 affects Intel(R) RAID Web Console software (all versions). Root cause: an uncontrolled search path element that can let an authenticated, locally privileged user escalate privileges. Explanations from NVD/Red Hat Intel advisory confirm local access attack vector with HIGH impact to...

CVE-2024-34543

CVE-2024-34543: Improper access control in Intel(R) RAID Web Console software (all versions) may allow an authenticated local user to escalate privileges. Affected product: Intel(R) RAID Web Console software. Root cause: insufficient access checks enabling privilege escalation via local access. I...

CVE-2024-32666

CVE-2024-32666 describes a NULL pointer dereference in Intel® RAID Web Console software across all versions. An authenticated, local attacker could potentially cause a denial of service. The Intel advisory and related sources indicate there is no fix planned; Intel has issued a product discontinu...

CVE-2024-33848

The CVE-2024-33848 issue affects Intel(R) RAID Web Console software (all versions). The root cause is an uncaught exception that may allow an authenticated user to trigger a denial of service via local access. According to multiple sources (NVD/RH Red Hat, Intel advisory), the vulnerability is ex...

CVE-2024-36247

The CVE-2024-36247 issue affects Intel® RAID Web Console software (all versions). It is caused by improper access control that may allow an authenticated user to cause a denial-of-service via adjacent access, impacting availability. Intel’s advisory (INTEL-SA-00926) notes that the product is disc...

CVE-2024-28170

Summary: CVE-2024-28170 is an improper access control vulnerability in Intel® RAID Web Console, affecting all versions. An authenticated user with local access may cause information disclosure. The issue is confirmed across multiple sources including NVD, Red Hat, and Intel’s advisory. Affected p...

CVE-2024-34545

Intel RAID Web Console software (all versions) suffers an improper input validation vulnerability that may allow an authenticated user to cause information disclosure via adjacent access. The issue affects Intel RAID Web Console and is described in CVE-2024-34545; Red Hat and other feeds mirror t...

CVE-2024-36261

The CVE-2024-36261 entry concerns Intel(R) RAID Web Console software with improper access control across all versions, enabling an authenticated user to potentially trigger a denial of service via adjacent access. Affected component: Intel RAID Web Console (web-based management tool for Intel RAI...

CVE-2024-32940

Intel(R) RAID Web Console software (all versions) is affected by CVE-2024-32940 due to improper access control that may allow an authenticated user to cause a denial of service via adjacent access. The issue affects the Web Console product across all versions and is characterized by an adjacent a...