Vulnerabilities (CVE)

Filtered by vendor Intel Subscribe
Total 1545 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12189 1 Intel 2 Converged Security Management Engine Firmware, Trusted Execution Engine Firmware 2024-11-21 2.1 LOW 4.4 MEDIUM
Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.
CVE-2018-12188 1 Intel 2 Converged Security Management Engine Firmware, Trusted Execution Engine Firmware 2024-11-21 2.1 LOW 4.6 MEDIUM
Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.
CVE-2018-12187 1 Intel 1 Active Management Technology Firmware 2024-11-21 5.0 MEDIUM 7.5 HIGH
Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.
CVE-2018-12185 1 Intel 1 Converged Security Management Engine Firmware 2024-11-21 4.6 MEDIUM 6.8 MEDIUM
Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.
CVE-2018-12177 1 Intel 24 Dual Band Wireless-ac 3160, Dual Band Wireless-ac 3165, Dual Band Wireless-ac 3168 and 21 more 2024-11-21 4.6 MEDIUM 7.8 HIGH
Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.
CVE-2018-12176 1 Intel 29 Compute Card Cd1iv128mk, Compute Card Cd1m3128mk, Compute Card Cd1p64gk and 26 more 2024-11-21 7.2 HIGH 8.2 HIGH
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
CVE-2018-12175 1 Intel 1 Distribution For Python 2024-11-21 4.6 MEDIUM 7.8 HIGH
Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local access.
CVE-2018-12174 1 Intel 1 Parallel Studio Xe 2024-11-21 4.6 MEDIUM 7.8 HIGH
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access.
CVE-2018-12173 1 Intel 28 Compute Module Hns2600bp, Compute Module Hns2600bp Firmware, Compute Module Hns2600bpr and 25 more 2024-11-21 7.2 HIGH 7.6 HIGH
Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
CVE-2018-12172 1 Intel 8 Hns7200ap, Hns7200ap Firmware, Hns7200apr and 5 more 2024-11-21 2.1 LOW 5.5 MEDIUM
Improper password hashing in firmware in Intel Server Board (S7200AP,S7200APR) and Intel Compute Module (HNS7200AP, HNS7200AP) may allow a privileged user to potentially disclose firmware passwords via local access.
CVE-2018-12171 1 Intel 31 Bbs2600bpb, Bbs2600bpq, Bbs2600bps and 28 more 2024-11-21 7.5 HIGH 9.8 CRITICAL
Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
CVE-2018-12169 2 Intel, Lenovo 32 Core I3, Core I5, Core I7 and 29 more 2024-11-21 4.6 MEDIUM 7.6 HIGH
Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
CVE-2018-12168 1 Intel 1 Computing Improvement Program 2024-11-21 7.2 HIGH 7.8 HIGH
Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local access.
CVE-2018-12167 1 Intel 2 Optane Ssd Dc P4800x, Optane Ssd Dc P4800x Firmware 2024-11-21 2.1 LOW 4.4 MEDIUM
Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.
CVE-2018-12166 1 Intel 2 Optane Ssd Dc P4800x, Optane Ssd Dc P4800x Firmware 2024-11-21 2.1 LOW 4.4 MEDIUM
Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.
CVE-2018-12163 1 Intel 1 Iot Developers Kit 2024-11-21 6.8 MEDIUM 4.8 MEDIUM
A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.
CVE-2018-12162 1 Intel 1 Openvino Toolkit 2024-11-21 4.6 MEDIUM 7.8 HIGH
Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using default directory permissions via local access.
CVE-2018-12161 1 Intel 1 Raid Web Console 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access.
CVE-2018-12160 1 Intel 1 Data Migration Software 2024-11-21 4.6 MEDIUM 5.3 MEDIUM
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.
CVE-2018-12159 1 Intel 1 Proset\/wireless 2024-11-21 2.1 LOW 5.5 MEDIUM
Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of service via local access.