alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-0094 (published 2021-06-09)
Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: intel
Affected products: driver_\&_support_assistant
CVE-2021-0095 (published 2021-06-09)
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-665
Affected vendors: intel
Affected products: bios, core_i3-l13g4, core_i5-l16g7, core_i7-10510u, core_i7-10510y, core_i7-1060g7, core_i7-1060ng7, core_i7-10610u, core_i7-1065g7, core_i7-1068ng7, core_i7-10700, core_i7-10700e, core_i7-10700f, core_i7-10700k, core_i7-10700kf, core_i7-10700t, core_i7-10700te, core_i7-10710u, core_i7-10750h, core_i7-10810u, core_i7-10850h, core_i7-10870h, core_i7-10875h, core_i7-11370h, core_i7-11375h
CVE-2021-0096 (published 2021-11-17)
Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: intel
Affected products: nuc7i3dn, nuc7i3dn_firmware, nuc7i5dn, nuc7i5dn_firmware, nuc7i7dn, nuc7i7dn_firmware
CVE-2021-0097 (published 2021-06-09)
Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-22
Affected vendors: intel
Affected products: efi_bios_7215, server_board_m10jnp2sb
CVE-2021-0098 (published 2021-06-09)
Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: unite
CVE-2021-0099 (published 2022-02-09)
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0100 (published 2021-06-09)
Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: ssd_data_center_tool
CVE-2021-0101 (published 2021-06-09)
Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: efi_bios_7215, server_board_m10jnp2sb
CVE-2021-0102 (published 2021-06-09)
Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: unite
CVE-2021-0103 (published 2022-02-09)
Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0104 (published 2021-06-09)
Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: rapid_storage_technology
CVE-2021-0105 (published 2021-06-09)
Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, wi-fi_6_ax200, wi-fi_6_ax200_firmware, wi-fi_6_ax201, wi-fi_6_ax201_firmware
CVE-2021-0106 (published 2021-06-09)
Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: ipmctl, xeon_bronze_3204, xeon_bronze_3206r, xeon_gold_5215, xeon_gold_5215l, xeon_gold_5217, xeon_gold_5218, xeon_gold_5218b, xeon_gold_5218n, xeon_gold_5218r, xeon_gold_5218t, xeon_gold_5219y, xeon_gold_5220, xeon_gold_5220r, xeon_gold_5220s, xeon_gold_5220t, xeon_gold_5222, xeon_gold_5315y, xeon_gold_5317, xeon_gold_5318h, xeon_gold_5318n, xeon_gold_5318s, xeon_gold_5318y, xeon_gold_5320, xeon_gold_5320h
CVE-2021-0107 (published 2022-02-09)
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-252
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0108 (published 2021-06-09)
Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: unite
CVE-2021-0109 (published 2021-02-17)
Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: compute_stick_stk1a32sc, compute_stick_stk1a32sc_firmware
CVE-2021-0110 (published 2021-11-17)
Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: core_i3-10100y, core_i3-10110u, core_i3-10110y, core_i3-1110g4, core_i3-1115g4, core_i3-1120g4, core_i3-1125g4, core_i5-10210u, core_i5-10210y, core_i5-10310u, core_i5-10310y, core_i5-10610u, core_i5-1130g7, core_i5-1135g7, core_i7-10510u, core_i7-10510y, core_i7-10710u, core_i7-10810u, core_i7-1160g7, core_i7-1165g7, core_i7-1185g7, jhl6240, jhl6340, jhl6540, jhl7340
CVE-2021-0111 (published 2022-02-09)
NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-476
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0112 (published 2021-06-09)
Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: unite
CVE-2021-0113 (published 2021-06-09)
Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: efi_bios_7215, server_board_m10jnp2sb
CVE-2021-0114 (published 2021-08-16)
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1188
Affected vendors: intel
Affected products: atom_c3000, atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3558rc, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, core_i3-6006u, core_i3-6098p, core_i3-6100
CVE-2021-0115 (published 2022-02-09)
Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, cloud_backup, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100
CVE-2021-0116 (published 2022-02-09)
Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0117 (published 2022-02-09)
Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0118 (published 2022-02-09)
Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0119 (published 2022-02-09)
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0120 (published 2021-11-17)
Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-665
Affected vendors: intel, microsoft
Affected products: graphics_driver, windows_10
CVE-2021-0121 (published 2021-11-17)
Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, microsoft
Affected products: iris_xe_max_dedicated_graphics, windows_10
CVE-2021-0124 (published 2022-02-09)
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0125 (published 2022-02-09)
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0126 (published 2022-05-12)
Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: manageability_commander
CVE-2021-0127 (published 2022-02-09)
Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel, netapp
Affected products: celeron_g1610, celeron_g1610t, celeron_g1620, celeron_g1620t, celeron_g1630, celeron_g1820, celeron_g1820t, celeron_g1820te, celeron_g1830, celeron_g3930e, celeron_g3930te, clustered_data_ontap, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-10100, core_i3-10100e, core_i3-10100f, core_i3-10100t, core_i3-10100te, core_i3-10100y, core_i3-10105, core_i3-10105f, core_i3-10105t, core_i3-10110u
CVE-2021-0129 (published 2021-06-09)
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: bluez, debian, linux, redhat
Affected products: bluez, debian_linux, enterprise_linux, linux_kernel
CVE-2021-0131 (published 2021-06-09)
Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-338
Affected vendors: intel
Affected products: secl-dc, xeon_bronze_3104, xeon_bronze_3106, xeon_bronze_3204, xeon_bronze_3206r, xeon_gold_5115, xeon_gold_5117, xeon_gold_5117f, xeon_gold_5118, xeon_gold_5119t, xeon_gold_5120, xeon_gold_5120t, xeon_gold_5122, xeon_gold_5215, xeon_gold_5215l, xeon_gold_5217, xeon_gold_5218, xeon_gold_5218b, xeon_gold_5218n, xeon_gold_5218r, xeon_gold_5218t, xeon_gold_5219y, xeon_gold_5220, xeon_gold_5220r, xeon_gold_5220s
CVE-2021-0132 (published 2021-06-09)
Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-772
Affected vendors: intel
Affected products: secl-dc, xeon_bronze_3104, xeon_bronze_3106, xeon_bronze_3204, xeon_bronze_3206r, xeon_gold_5115, xeon_gold_5117, xeon_gold_5117f, xeon_gold_5118, xeon_gold_5119t, xeon_gold_5120, xeon_gold_5120t, xeon_gold_5122, xeon_gold_5215, xeon_gold_5215l, xeon_gold_5217, xeon_gold_5218, xeon_gold_5218b, xeon_gold_5218n, xeon_gold_5218r, xeon_gold_5218t, xeon_gold_5219y, xeon_gold_5220, xeon_gold_5220r, xeon_gold_5220s
CVE-2021-0133 (published 2021-06-09)
Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: intel
Affected products: secl-dc, xeon_bronze_3104, xeon_bronze_3106, xeon_bronze_3204, xeon_bronze_3206r, xeon_gold_5115, xeon_gold_5117, xeon_gold_5117f, xeon_gold_5118, xeon_gold_5119t, xeon_gold_5120, xeon_gold_5120t, xeon_gold_5122, xeon_gold_5215, xeon_gold_5215l, xeon_gold_5217, xeon_gold_5218, xeon_gold_5218b, xeon_gold_5218n, xeon_gold_5218r, xeon_gold_5218t, xeon_gold_5219y, xeon_gold_5220, xeon_gold_5220r, xeon_gold_5220s
CVE-2021-0134 (published 2021-06-09)
Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: secl-dc, xeon_bronze_3104, xeon_bronze_3106, xeon_bronze_3204, xeon_bronze_3206r, xeon_gold_5115, xeon_gold_5117, xeon_gold_5117f, xeon_gold_5118, xeon_gold_5119t, xeon_gold_5120, xeon_gold_5120t, xeon_gold_5122, xeon_gold_5215, xeon_gold_5215l, xeon_gold_5217, xeon_gold_5218, xeon_gold_5218b, xeon_gold_5218n, xeon_gold_5218r, xeon_gold_5218t, xeon_gold_5219y, xeon_gold_5220, xeon_gold_5220r, xeon_gold_5220s
CVE-2021-0135 (published 2021-11-17)
Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_diagnostic_driver
CVE-2021-0143 (published 2021-06-17)
Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: brand_verification_tool
CVE-2021-0144 (published 2021-07-14)
Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1188
Affected vendors: intel
Affected products: atom_c3000, atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3558rc, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, core_i3-6006u, core_i3-6098p, core_i3-6100
CVE-2021-0145 (published 2022-02-09)
Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-665
Affected vendors: intel, netapp
Affected products: celeron_6305, celeron_6305e, celeron_6600he, core_i3-1000g1, core_i3-1000g4, core_i3-1005g1, core_i3-11100he, core_i3-1110g4, core_i3-1115g4, core_i3-1115g4e, core_i3-1115gre, core_i3-1120g4, core_i3-1125g4, core_i5-1030g4, core_i5-1030g7, core_i5-1035g1, core_i5-1035g4, core_i5-1035g7, core_i5-11260h, core_i5-11300h, core_i5-1130g7, core_i5-11320h, core_i5-1135g7, core_i5-11400, core_i5-11400f
CVE-2021-0146 (published 2021-11-17)
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: atom_c3000, atom_c3000_firmware, atom_x5-e3930, atom_x5-e3930_firmware, atom_x5-e3940, atom_x5-e3940_firmware, atom_x7-e3950, atom_x7-e3950_firmware, celeron_j1750, celeron_j1750_firmware, celeron_j1800, celeron_j1800_firmware, celeron_j1850, celeron_j1850_firmware, celeron_j1900, celeron_j1900_firmware, celeron_j3060, celeron_j3060_firmware, celeron_j3160, celeron_j3160_firmware, celeron_j3355, celeron_j3355_firmware, celeron_j3355e, celeron_j3355e_firmware, celeron_j3455
CVE-2021-0147 (published 2022-02-09)
Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lbg_b0-21ww02a may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-667
Affected vendors: intel
Affected products: power_management_controller
CVE-2021-0148 (published 2021-11-17)
Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: intel
Affected products: ssd_d-s4510, ssd_d-s4510_firmware, ssd_d5-p4320, ssd_d5-p4320_firmware, ssd_d5-p4326, ssd_d5-p4326_firmware, ssd_d5-p4420, ssd_d5-p4420_firmware, ssd_d7-p5500, ssd_d7-p5500_firmware, ssd_d7-p5600, ssd_d7-p5600_firmware, ssd_d7-p5608, ssd_d7-p5608_firmware, ssd_dc_d4512, ssd_dc_d4512_firmware, ssd_dc_p4500, ssd_dc_p4500_firmware, ssd_dc_p4501, ssd_dc_p4501_firmware, ssd_dc_p4510_edsff, ssd_dc_p4510_edsff_firmware, ssd_dc_p4510_u.2, ssd_dc_p4510_u.2_firmware, ssd_dc_p4511_edsff
CVE-2021-0151 (published 2021-11-17)
Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_7265, ac_7265_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0152 (published 2021-11-17)
Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-347
Affected vendors: intel
Affected products: ac1550, ac1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_7265, ac_7265_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2021-0153 (published 2022-05-12)
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: core_i9-10900x, core_i9-10900x_firmware, core_i9-10920x, core_i9-10920x_firmware, core_i9-10940x, core_i9-10940x_firmware, core_i9-10980xe, core_i9-10980xe_firmware, xeon_e5-1603_v4, xeon_e5-1603_v4_firmware, xeon_e5-1607_v4, xeon_e5-1607_v4_firmware, xeon_e5-1620_v4, xeon_e5-1620_v4_firmware, xeon_e5-1630_v4, xeon_e5-1630_v4_firmware, xeon_e5-1650_v4, xeon_e5-1650_v4_firmware, xeon_e5-1660_v4, xeon_e5-1660_v4_firmware, xeon_e5-1680_v4, xeon_e5-1680_v4_firmware, xeon_e5-2603_v4, xeon_e5-2603_v4_firmware, xeon_e5-2608l_v4
CVE-2021-0154 (published 2022-05-12)
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: core_i5-7640x, core_i5-7640x_firmware, core_i7-3820, core_i7-3820_firmware, core_i7-3920xm, core_i7-3920xm_firmware, core_i7-3930k, core_i7-3930k_firmware, core_i7-3940xm, core_i7-3940xm_firmware, core_i7-3960x, core_i7-3960x_firmware, core_i7-3970x, core_i7-3970x_firmware, core_i7-4820k, core_i7-4820k_firmware, core_i7-4930k, core_i7-4930k_firmware, core_i7-4930mx, core_i7-4930mx_firmware, core_i7-4940mx, core_i7-4940mx_firmware, core_i7-4960x, core_i7-4960x_firmware, core_i7-5820k
CVE-2021-0155 (published 2022-05-12)
Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-252
Affected vendors: intel
Affected products: core_i5-7640x, core_i5-7640x_firmware, core_i7-3820, core_i7-3820_firmware, core_i7-3920xm, core_i7-3920xm_firmware, core_i7-3930k, core_i7-3930k_firmware, core_i7-3940xm, core_i7-3940xm_firmware, core_i7-3960x, core_i7-3960x_firmware, core_i7-3970x, core_i7-3970x_firmware, core_i7-4820k, core_i7-4820k_firmware, core_i7-4930k, core_i7-4930k_firmware, core_i7-4930mx, core_i7-4930mx_firmware, core_i7-4940mx, core_i7-4940mx_firmware, core_i7-4960x, core_i7-4960x_firmware, core_i7-5820k
CVE-2021-0156 (published 2022-02-09)
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3308_firmware, atom_c3336, atom_c3336_firmware, atom_c3338, atom_c3338_firmware, atom_c3338r, atom_c3338r_firmware, atom_c3436l, atom_c3436l_firmware, atom_c3508, atom_c3508_firmware, atom_c3538, atom_c3538_firmware, atom_c3558, atom_c3558_firmware, atom_c3558r, atom_c3558r_firmware, atom_c3708, atom_c3708_firmware, atom_c3750, atom_c3750_firmware, atom_c3758, atom_c3758_firmware, atom_c3758r
CVE-2021-0157 (published 2021-11-17)
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: celeron_n2805, celeron_n2806, celeron_n2807, celeron_n2808, celeron_n2810, celeron_n2815, celeron_n2820, celeron_n2830, celeron_n2840, celeron_n2910, celeron_n2920, celeron_n2930, celeron_n2940, celeron_n3000, celeron_n3010, celeron_n3050, celeron_n3060, celeron_n3150, celeron_n3160, celeron_n3350, celeron_n3350e, celeron_n3450, celeron_n4000, celeron_n4020, celeron_n4100
CVE-2021-0158 (published 2021-11-17)
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: celeron_n2805, celeron_n2806, celeron_n2807, celeron_n2808, celeron_n2810, celeron_n2815, celeron_n2820, celeron_n2830, celeron_n2840, celeron_n2910, celeron_n2920, celeron_n2930, celeron_n2940, celeron_n3000, celeron_n3010, celeron_n3050, celeron_n3060, celeron_n3150, celeron_n3160, celeron_n3350, celeron_n3350e, celeron_n3450, celeron_n4000, celeron_n4020, celeron_n4100
CVE-2021-0159 (published 2022-05-12)
Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: xeon_bronze_3204, xeon_bronze_3204_firmware, xeon_bronze_3206r, xeon_bronze_3206r_firmware, xeon_gold_5215, xeon_gold_5215_firmware, xeon_gold_5215l, xeon_gold_5215l_firmware, xeon_gold_5217, xeon_gold_5217_firmware, xeon_gold_5218, xeon_gold_5218_firmware, xeon_gold_5218b, xeon_gold_5218b_firmware, xeon_gold_5218n, xeon_gold_5218n_firmware, xeon_gold_5218r, xeon_gold_5218r_firmware, xeon_gold_5218t, xeon_gold_5218t_firmware, xeon_gold_5220, xeon_gold_5220_firmware, xeon_gold_5220r, xeon_gold_5220r_firmware, xeon_gold_5220s
CVE-2021-0160 (published 2021-08-11)
Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: avermedia_capture_card, nuc_pro_chassis_element_cmcm2fb, nuc_pro_chassis_element_cmcm2fbav, nuc_pro_chassis_element_cmcr1aba, nuc_pro_chassis_element_cmcr1abb, nuc_pro_chassis_element_cmcr1abc
CVE-2021-0161 (published 2022-02-09)
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0162 (published 2022-02-09)
Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0163 (published 2022-02-09)
Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0164 (published 2022-02-09)
Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0165 (published 2022-02-09)
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0166 (published 2022-02-09)
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0167 (published 2022-02-09)
Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0168 (published 2022-02-09)
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0169 (published 2022-02-09)
Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0170 (published 2022-02-09)
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0171 (published 2022-02-09)
Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0172 (published 2022-02-09)
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0173 (published 2022-02-09)
Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0174 (published 2022-02-09)
Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0175 (published 2022-02-09)
Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260
CVE-2021-0176 (published 2022-02-09)
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: amt_ac_8260, amt_ac_8260_firmware, amt_ac_8265, amt_ac_8265_firmware, amt_ac_9260, amt_ac_9260_firmware, amt_ac_9560, amt_ac_9560_firmware, amt_wi-fi_6_ax200, amt_wi-fi_6_ax200_firmware, amt_wi-fi_6_ax201, amt_wi-fi_6_ax201_firmware, amt_wi-fi_6_ax210, amt_wi-fi_6_ax210_firmware, killer_ac_1550, killer_ac_1550_firmware, killer_wi-fi_6_ax1650, killer_wi-fi_6_ax1650_firmware, killer_wi-fi_6e_ax1675, killer_wi-fi_6e_ax1675_firmware, proset_ac_3165, proset_ac_3165_firmware, proset_ac_3168, proset_ac_3168_firmware, proset_ac_8260