alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2018-3574 (published 2018-09-19)
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the ION_FLAG_SECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which does not belong to HLOS.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: google
Affected products: android
CVE-2018-3576 (published 2018-06-12)
improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: google
Affected products: android
CVE-2018-3577 (published 2018-07-06)
While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-190
Affected vendors: google
Affected products: android
CVE-2018-3578 (published 2018-06-06)
Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: google
Affected products: android
CVE-2018-3579 (published 2018-06-12)
In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_entries_in_page is a value received from firmware that is not properly validated which can lead to a buffer over-read
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: google
Affected products: android
CVE-2018-3580 (published 2018-06-06)
Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: google
Affected products: android
CVE-2018-3581 (published 2018-06-12)
In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overwrite can occur if the vdev_id received from firmware is larger than max_bssid.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: google
Affected products: android
CVE-2018-3582 (published 2018-06-12)
Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: google
Affected products: android
CVE-2018-3583 (published 2019-06-14)
A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9379, QCS605, SD 625, SD 636, SD 820, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9640, mdm9640_firmware, mdm9650, mdm9650_firmware, msm8909w, msm8909w_firmware, msm8996au, msm8996au_firmware, qca9379, qca9379_firmware, qcs605, qcs605_firmware, sd_625, sd_625_firmware, sd_636, sd_636_firmware, sd_820, sd_820_firmware, sd_820a, sd_820a_firmware, sd_835
CVE-2018-3584 (published 2018-04-03)
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a Use After Free condition can occur in the function rmnet_usb_ctrl_init().
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-416
Affected vendors: google
Affected products: android
CVE-2018-3586 (published 2018-07-06)
An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: google
Affected products: android
CVE-2018-3587 (published 2018-07-06)
In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), a Use After Free condition can occur.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: google
Affected products: android
CVE-2018-3588 (published 2018-10-26)
There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, msm8996au, msm8996au_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_820, sd_820_firmware, sd_820a, sd_820a_firmware, sd_835, sd_835_firmware, sda660, sda660_firmware
CVE-2018-3589 (published 2018-04-11)
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr capture size is larger than the maximum size of a diag logPacket, which can lead to a buffer overflow when the sample buffer is copied to the logPacket buffer.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: mdm9650, mdm9650_firmware, mdm9655, mdm9655_firmware, sd_835, sd_835_firmware, sd_845, sd_845_firmware, sd_850, sd_850_firmware
CVE-2018-3590 (published 2018-04-11)
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, a Use After Free condition can occur in RIL while handling requests from Android.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: msm8909w, msm8909w_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_415, sd_415_firmware, sd_450, sd_450_firmware, sd_615, sd_615_firmware, sd_616, sd_616_firmware, sd_625, sd_625_firmware, sd_650, sd_650_firmware, sd_652, sd_652_firmware, sd_820, sd_820_firmware, sd_835
CVE-2018-3591 (published 2018-04-11)
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the default build configuration of deviceprogrammer in BOOT.BF.3.0 enables the flag SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM which will open up the peek and poke commands to any memory location on the target.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1188
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9635m, mdm9635m_firmware, mdm9650, mdm9650_firmware, mdm9655, mdm9655_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_410, sd_410_firmware, sd_412, sd_412_firmware, sd_415, sd_415_firmware, sd_425, sd_425_firmware, sd_427
CVE-2018-3592 (published 2018-04-11)
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if the pointer has been reset to NULL or not, before writing to the memory pointed by the pointer.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9635m, mdm9635m_firmware, mdm9640, mdm9640_firmware, mdm9645, mdm9645_firmware, mdm9650, mdm9650_firmware, mdm9655, mdm9655_firmware, msm8909w, msm8909w_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_425, sd_425_firmware, sd_430
CVE-2018-3593 (published 2018-04-11)
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, repeated enable/disable eMBMS requests may result in a double free condition.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, msm8909w, msm8909w_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_400, sd_400_firmware, sd_415, sd_415_firmware, sd_425, sd_425_firmware, sd_430, sd_430_firmware, sd_450, sd_450_firmware, sd_615
CVE-2018-3594 (published 2018-04-11)
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_415, sd_415_firmware, sd_425, sd_425_firmware, sd_430, sd_430_firmware, sd_450, sd_450_firmware, sd_615, sd_615_firmware, sd_616, sd_616_firmware, sd_617
CVE-2018-3595 (published 2019-01-18)
Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: qualcomm
Affected products: mdm9206, mdm9206_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, msm8996au, msm8996au_firmware, sd_205, sd_205_firmware, sd_210, sd_210_firmware, sd_212, sd_212_firmware, sd_425, sd_425_firmware, sd_430, sd_430_firmware, sd_450, sd_450_firmware, sd_625, sd_625_firmware, sd_650, sd_650_firmware, sd_652
CVE-2018-3596 (published 2018-04-03)
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, legacy code vulnerable after migration has been removed.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: google
Affected products: android
CVE-2018-3597 (published 2018-07-06)
In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, an arbitrary kernel write can occur.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: google
Affected products: android
CVE-2018-3598 (published 2018-04-03)
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to information leak and out-of-bounds access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: google
Affected products: android
CVE-2018-3599 (published 2018-04-03)
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while notifying a DCI client, a Use After Free condition can occur.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: google
Affected products: android
CVE-2018-3600 (published 2018-02-09)
A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3601 (published 2018-02-09)
A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3602 (published 2018-02-09)
An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3603 (published 2018-02-09)
A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3604 (published 2018-02-09)
GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3605 (published 2018-02-09)
TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3606 (published 2018-02-09)
XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3607 (published 2018-02-09)
XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: trendmicro
Affected products: control_manager
CVE-2018-3608 (published 2018-07-06)
A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: microsoft, trendmicro
Affected products: antivirus_\+_security, internet_security, maximum_security, officescan, officescan_monthly, premium_security, windows
CVE-2018-3609 (published 2018-02-16)
A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be used to bypass authentication on vulnerable installations.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: trendmicro
Affected products: interscan_messaging_security_virtual_appliance
CVE-2018-3610 (published 2018-01-09)
SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or a denial of service condition.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: driver_\&_support_assistant
CVE-2018-3611 (published 2018-05-15)
Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: graphics_driver
CVE-2018-3612 (published 2018-05-10)
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM).
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ayaplcel.86a, bios, bnkbl357.86a, ccsklm30.86a, ccsklm5v.86a, dnkbli30.86a, dnkbli5v.86a, dnkbli7v.86a, fybyt10h.86a, gkaplcpx.86a, kyskli70.86a, mkkbli5v.86a, mkkbly35.86a, mybdwi30.86a, mybdwi5v.86a, rybdwi35.86a, syskli35.86a, tybyt10h.86a
CVE-2018-3613 (published 2019-03-27)
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: tianocore
Affected products: edk_ii
CVE-2018-3615 (published 2018-08-14)
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N)
Weakness: CWE-203
Affected vendors: intel
Affected products: core_i3, core_i5, core_i7, xeon_e3, xeon_e3_1220_v5, xeon_e3_1220_v6, xeon_e3_1225_v5, xeon_e3_1225_v6, xeon_e3_1230_v5, xeon_e3_1230_v6, xeon_e3_1235l_v5, xeon_e3_1240_v5, xeon_e3_1240_v6, xeon_e3_1240l_v5, xeon_e3_1245_v5, xeon_e3_1245_v6, xeon_e3_1260l_v5, xeon_e3_1268l_v5, xeon_e3_1270_v5, xeon_e3_1270_v6, xeon_e3_1275_v5, xeon_e3_1275_v6, xeon_e3_1280_v5, xeon_e3_1280_v6, xeon_e3_1285_v6
CVE-2018-3616 (published 2018-09-12)
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel, siemens
Affected products: active_management_technology_firmware, converged_security_management_engine_firmware, manageability_engine_firmware, simatic_field_pg_m5, simatic_field_pg_m5_firmware, simatic_ipc427e, simatic_ipc427e_firmware, simatic_ipc477e, simatic_ipc477e_firmware, simatic_ipc547e_firmware, simatic_ipc547g, simatic_ipc627d, simatic_ipc627d_firmware, simatic_ipc647d, simatic_ipc647d_firmware, simatic_ipc677d, simatic_ipc677d_firmware, simatic_ipc827d, simatic_ipc827d_firmware, simatic_ipc847d, simatic_ipc847d_firmware, simatic_itp1000, simatic_itp1000_firmware, simatic_pc547e, simatic_pc547g_firmware
CVE-2018-3619 (published 2018-07-10)
Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an attacker to recover data via physical access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: intel
Affected products: core_i3, core_i5, core_i7, core_i9, core_m3, xeon_e-2124, xeon_e-2124g, xeon_e-2126g, xeon_e-2134, xeon_e-2136, xeon_e-2144g, xeon_e-2146g, xeon_e-2174g, xeon_e-2176g, xeon_e-2176m, xeon_e-2186g, xeon_e-2186m
CVE-2018-3620 (published 2018-08-14)
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: intel
Affected products: core_i3, core_i5, core_i7, core_m, core_m3, core_m5, core_m7, xeon
CVE-2018-3621 (published 2018-11-14)
Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: intel
Affected products: driver\&support_assistant
CVE-2018-3624 (published 2018-04-05)
Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: 2g_modem_firmware, sofia_3g, sofia_3g-r, sofia_3g-r_w, xmm71xx, xmm72xx, xmm73xx, xmm74xx
CVE-2018-3626 (published 2018-03-20)
Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: intel, linux, microsoft
Affected products: linux_kernel, sgx_sdk, windows
CVE-2018-3627 (published 2018-07-10)
Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: converged_security_management_engine_firmware, core_i3, core_i5, core_i7, core_i9, element_software_management_node, xeon_e3_1220_v5, xeon_e3_1220_v6, xeon_e3_1225_v5, xeon_e3_1225_v6, xeon_e3_1230_v5, xeon_e3_1230_v6, xeon_e3_1235l_v5, xeon_e3_1240_v5, xeon_e3_1240_v6, xeon_e3_1240l_v5, xeon_e3_1245_v5, xeon_e3_1245_v6, xeon_e3_1260l_v5, xeon_e3_1270_v5, xeon_e3_1270_v6, xeon_e3_1275_v6, xeon_e3_1280_v5, xeon_e3_1280_v6, xeon_e3_1285_v6
CVE-2018-3628 (published 2018-07-10)
Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to execute arbitrary code via the same subnet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: active_management_technology_firmware, core_2_duo, core_2_extreme, core_2_quad, core_2_solo, core_duo, core_i3, core_i5, core_i7, core_i9, core_solo, xeon, xeon_e3_1268l_v5, xeon_e3_1275_v5, xeon_gold, xeon_platinum, xeon_silver
CVE-2018-3629 (published 2018-07-10)
Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.x, 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x may allow an attacker to cause a denial of service via the same subnet.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: active_management_technology_firmware, core_2_duo, core_2_extreme, core_2_quad, core_2_solo, core_duo, core_i3, core_i5, core_i7, core_i9, core_solo, xeon, xeon_gold, xeon_platinum, xeon_silver
CVE-2018-3632 (published 2018-07-10)
Memory corruption in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 6.x / 7.x / 8.x / 9.x / 10.x / 11.0 / 11.5 / 11.6 / 11.7 / 11.10 / 11.20 could be triggered by an attacker with local administrator permission on the system.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: active_management_technology_firmware, core_2_duo, core_2_extreme, core_2_quad, core_2_solo, core_duo, core_i3, core_i5, core_i7, core_i9, core_solo, xeon, xeon_gold, xeon_platinum, xeon_silver
CVE-2018-3634 (published 2018-05-15)
Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: online_connect_access
CVE-2018-3635 (published 2018-11-14)
Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: intel
Affected products: rapid_storage_technology
CVE-2018-3638 (published 2018-04-03)
Escalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local attacker to execute arbitrary code as a privileged user.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: remote_keyboard, remote_keyboard_mobile_app
CVE-2018-3639 (published 2018-05-22)
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: arm, canonical, debian, intel, microsoft, mitel, nvidia, oracle, redhat, schneider-electric, siemens, sonicwall
Affected products: atom_c, atom_e, atom_x5-e3930, atom_x5-e3940, atom_x7-e3950, atom_z, celeron_j, celeron_n, cloud_global_management_system, core_i3, core_i5, core_i7, core_m, cortex-a, debian_linux, email_security, enterprise_linux, enterprise_linux_desktop, enterprise_linux_eus, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_tus, enterprise_linux_workstation, global_management_system, itc1500
CVE-2018-3640 (published 2018-05-22)
Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: arm, intel
Affected products: atom_c, atom_e, atom_z, celeron_j, celeron_n, core_i3, core_i5, core_i7, core_m, cortex-a, pentium, pentium_j, pentium_silver, xeon_e-1105c, xeon_e3, xeon_e3_1105c_v2, xeon_e3_1125c_v2, xeon_e3_12201, xeon_e3_12201_v2, xeon_e3_1220_v2, xeon_e3_1220_v3, xeon_e3_1220_v5, xeon_e3_1220_v6, xeon_e3_1220l_v3, xeon_e3_1225
CVE-2018-3641 (published 2018-04-03)
Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: remote_keyboard, remote_keyboard_mobile_app
CVE-2018-3643 (published 2018-09-12)
A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, server_platform_services_firmware
CVE-2018-3645 (published 2018-04-03)
Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: remote_keyboard, remote_keyboard_mobile_app
CVE-2018-3646 (published 2018-08-14)
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: intel
Affected products: core_i3, core_i5, core_i7, core_m, core_m3, core_m5, core_m7, xeon
CVE-2018-3649 (published 2018-05-10)
DLL injection vulnerability in the installation executables (Autorun.exe and Setup.exe) for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code execution.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: dual_band_wireless-ac_3160, dual_band_wireless-ac_3165, dual_band_wireless-ac_3168, dual_band_wireless-ac_7260, dual_band_wireless-ac_7265, dual_band_wireless-ac_8260, dual_band_wireless-ac_8265, dual_band_wireless-n_7260, dual_band_wireless-n_7265, tri-band_wireless-ac_17265, tri-band_wireless-ac_18260, tri-band_wireless-ac_18265, wireless-ac_9260, wireless-ac_9461, wireless-ac_9462, wireless-ac_9560, wireless-n_7260, wireless-n_7265
CVE-2018-3650 (published 2018-08-01)
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: distribution_for_python
CVE-2018-3652 (published 2018-07-10)
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: intel
Affected products: atom_c, xeon, xeon_bronze_3104, xeon_bronze_3106, xeon_e3, xeon_e3_1220_v5, xeon_e3_1220_v6, xeon_e3_1225_v5, xeon_e3_1225_v6, xeon_e3_1230_v5, xeon_e3_1230_v6, xeon_e3_1235l_v5, xeon_e3_1240_v5, xeon_e3_1240_v6, xeon_e3_1240l_v5, xeon_e3_1245_v5, xeon_e3_1245_v6, xeon_e3_1260l_v5, xeon_e3_1268l_v5, xeon_e3_1270_v5, xeon_e3_1270_v6, xeon_e3_1275_v5, xeon_e3_1275_v6, xeon_e3_1280_v5, xeon_e3_1280_v6
CVE-2018-3655 (published 2018-09-12)
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, server_platform_services_firmware, trusted_execution_engine_firmware
CVE-2018-3657 (published 2018-09-12)
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel, siemens
Affected products: active_management_technology_firmware, converged_security_management_engine_firmware, manageability_engine_firmware, simatic_field_pg_m5, simatic_field_pg_m5_firmware, simatic_ipc427e, simatic_ipc427e_firmware, simatic_ipc477e, simatic_ipc477e_firmware, simatic_ipc547e_firmware, simatic_ipc547g, simatic_ipc627d, simatic_ipc627d_firmware, simatic_ipc647d, simatic_ipc647d_firmware, simatic_ipc677d, simatic_ipc677d_firmware, simatic_ipc827d, simatic_ipc827d_firmware, simatic_ipc847d, simatic_ipc847d_firmware, simatic_itp1000, simatic_itp1000_firmware, simatic_pc547e, simatic_pc547g_firmware
CVE-2018-3658 (published 2018-09-12)
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-772
Affected vendors: intel, siemens
Affected products: active_management_technology_firmware, converged_security_management_engine_firmware, manageability_engine_firmware, simatic_field_pg_m5, simatic_field_pg_m5_firmware, simatic_ipc427e, simatic_ipc427e_firmware, simatic_ipc477e, simatic_ipc477e_firmware, simatic_ipc547e_firmware, simatic_ipc547g, simatic_ipc627d, simatic_ipc627d_firmware, simatic_ipc647d, simatic_ipc647d_firmware, simatic_ipc677d, simatic_ipc677d_firmware, simatic_ipc827d, simatic_ipc827d_firmware, simatic_ipc847d, simatic_ipc847d_firmware, simatic_itp1000, simatic_itp1000_firmware, simatic_pc547e, simatic_pc547g_firmware
CVE-2018-3659 (published 2018-09-12)
A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, trusted_execution_engine_firmware
CVE-2018-3661 (published 2018-05-15)
Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: selview, syscfg
CVE-2018-3662 (published 2018-08-01)
Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to execute arbitrary code as root.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: saffron_memorybase
CVE-2018-3663 (published 2018-08-01)
Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: saffron_memorybase
CVE-2018-3665 (published 2018-06-21)
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: canonical, citrix, debian, freebsd, intel, redhat
Affected products: core_i3, core_i5, core_i7, core_m, core_m3, core_m5, core_m7, debian_linux, enterprise_linux, enterprise_linux_desktop, enterprise_linux_workstation, freebsd, ubuntu_linux, xenserver
CVE-2018-3666 (published 2018-08-01)
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: intel
Affected products: intel_smart_sound_technology
CVE-2018-3667 (published 2018-07-10)
Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of arbitrary code and potential privilege escalation.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1188
Affected vendors: intel
Affected products: processor_diagnostic_tool
CVE-2018-3668 (published 2018-07-10)
Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: processor_diagnostic_tool
CVE-2018-3669 (published 2018-09-12)
A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: centrino_advanced-n_6230, centrino_advanced-n_6235, centrino_firmware, centrino_wireless-n_1030, centrino_wireless-n_130, centrino_wireless-n_135, centrino_wireless-n_2230
CVE-2018-3670 (published 2018-08-01)
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: intel_smart_sound_technology
CVE-2018-3671 (published 2018-08-01)
Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: saffron_memorybase
CVE-2018-3672 (published 2018-08-01)
Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: intel
Affected products: intel_smart_sound_technology
CVE-2018-3679 (published 2018-09-12)
Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: intel
Affected products: data_center_manager
CVE-2018-3682 (published 2018-07-10)
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: intel
Affected products: bbs2600bpb, bbs2600bpq, bbs2600bps, bbs2600stb, bbs2600stq, bbs7200ap, bbs7200apl, bmc_firmware, dbs2600cw2r, dbs2600cw2sr, dbs2600cwtr, dbs2600cwtsr, hns2600bpb, hns2600bpb24, hns2600bpblc, hns2600bpblc24, hns2600bpq, hns2600bpq24, hns2600bps, hns2600bps24, hns2600kpfr, hns2600kpr, hns2600tp24r, hns2600tp24sr, hns2600tp24str
CVE-2018-3683 (published 2018-07-10)
Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: quartus_prime
CVE-2018-3684 (published 2018-07-10)
Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: quartus_ii
CVE-2018-3686 (published 2018-09-12)
Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: intel
Affected products: sa-00086_detection_tool
CVE-2018-3687 (published 2018-07-10)
Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: quartus_ii_programmer_and_tools
CVE-2018-3688 (published 2018-07-10)
Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: intel
Affected products: quartus_prime_programmer_and_tools
CVE-2018-3689 (published 2018-04-03)
AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel, linux
Affected products: linux_kernel, software_guard_extensions
CVE-2018-3691 (published 2018-06-05)
Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: integrated_performance_primitives_cryptography
CVE-2018-3693 (published 2018-07-10)
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: arm, fujitsu, intel, netapp, oracle, redhat, schneider-electric
Affected products: atom_c, atom_e, atom_x3, atom_z, celeron_j, celeron_n, communications_eagle_application_processor, communications_lsms, core_i3, core_i5, core_i7, core_m, core_m3, core_m5, core_m7, cortex-a, cortex-r, enterprise_linux, enterprise_linux_desktop, enterprise_linux_eus, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_eus, enterprise_linux_server_tus, enterprise_linux_workstation
CVE-2018-3696 (published 2018-11-14)
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-287
Affected vendors: intel
Affected products: raid_web_console_3
CVE-2018-3697 (published 2018-11-14)
Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: media_server_studio
CVE-2018-3698 (published 2018-11-14)
Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: ready_mode_technology
CVE-2018-3699 (published 2018-11-14)
Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: intel
Affected products: raid_web_console_3
CVE-2018-3700 (published 2019-02-18)
Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: intel, microsoft
Affected products: usb_3.0_extensible_host_controller_driver, windows_7
CVE-2018-3701 (published 2019-05-17)
Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: proset\/wireless_wifi
CVE-2018-3702 (published 2019-06-13)
Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel, microsoft
Affected products: ite_tech_consumer_infrared_driver, windows_10
CVE-2018-3703 (published 2019-01-10)
Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel, microsoft
Affected products: ssd_data_center_tool, windows