deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-11201
Published: 2020-11-12
Description: Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/; https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-11202
Published: 2020-11-12
Description: Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA670, SDA845, SDM640, SDM670, SDM710, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/; https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-11205
Published: 2020-11-12
Description: u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-11206
Published: 2020-11-12
Description: Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
CVSS Score: 7.8 (HIGH)
References: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/; https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-11207
Published: 2020-11-12
Description: Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/; https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-11208
Published: 2020-11-12
Description: Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/; https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-11209
Published: 2020-11-12
Description: Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675, SD660, SD429, SD439
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/; https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-3632
Published: 2020-11-12
Description: u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-3639
Published: 2020-11-12
Description: u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8017, APQ8037, APQ8053, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCM4290, QCM6125, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QM215, QSM8350, SA415M, SA6145P, SA6150P, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA429W, SDA640, SDA660, SDA670, SDA845, SDA855, SDM1000, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM712, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8350, SM8350P, SXR1120, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin
CVE: CVE-2020-7331
Published: 2020-11-12
Description: Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10335; https://kc.mcafee.com/corporate/index?page=content&id=SB10335
CVE: CVE-2020-7332
Published: 2020-11-12
Description: Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to incorrect security configuration.
CVSS Score: 7.0 (HIGH)
CWE: CWE-352, CWE-352
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10335; https://kc.mcafee.com/corporate/index?page=content&id=SB10335
CVE: CVE-2020-7333
Published: 2020-11-12
Description: Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10335; https://kc.mcafee.com/corporate/index?page=content&id=SB10335
CVE: CVE-2020-7770
Published: 2020-11-12
Description: This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1321
References: https://github.com/sonnyp/JSON8/commit/2e890261b66cbc54ae01d0c79c71b0fd18379e7e; https://snyk.io/vuln/SNYK-JS-JSON8-1017116; https://github.com/sonnyp/JSON8/commit/2e890261b66cbc54ae01d0c79c71b0fd18379e7e
CVE: CVE-2020-13954
Published: 2020-11-12
Description: By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web page. This vulnerability affects all versions of Apache CXF prior to 3.4.1 and 3.3.8. Please note that this is a separate issue to CVE-2019-17573.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://cxf.apache.org/security-advisories.data/CVE-2020-13954.txt.asc?version=1&modificationDate=[PII_REDACTED]59&api=v2; http://www.openwall.com/lists/oss-security/2020/11/12/2; https://lists.apache.org/thread.html/r51fdd73548290b2dfd0b48f7ab69bf9ae064dd100364cd8a15f0b3ec%40%3Cannounce.apache.org%3E
CVE: CVE-2020-25658
Published: 2020-11-12
Description: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
CVSS Score: 7.5 (HIGH)
CWE: CWE-385, CWE-327
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658; https://github.com/sybrenstuvel/python-rsa/issues/165; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA/
CVE: CVE-2020-25706
Published: 2020-11-12
Description: A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25706; https://github.com/Cacti/cacti/commit/39458efcd5286d50e6b7f905fedcdc1059354e6e; https://github.com/Cacti/cacti/issues/3723
CVE: CVE-2020-27481
Published: 2020-11-12
Description: An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlr_lms_cancel_booking" where POST Parameter "id" was sent straight into SQL query without sanitization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/0xx7/a7aaa8b0515139cf7e30c808c8d54070; https://gist.github.com/0xx7/a7aaa8b0515139cf7e30c808c8d54070
CVE: CVE-2020-9128
Published: 2020-11-12
Description: FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerability to cause information leak.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-326
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201104-01-encryption-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201104-01-encryption-en
CVE: CVE-2020-24441
Published: 2020-11-12
Description: Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created by the application. This could result in disclosure of sensitive information stored in databases used by the application. Exploitation requires a victim to download and run a malicious application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/reader-mobile/apsb20-71.html; https://helpx.adobe.com/security/products/reader-mobile/apsb20-71.html
CVE: CVE-2020-24442
Published: 2020-11-12
Description: Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb20-69.html; https://helpx.adobe.com/security/products/connect/apsb20-69.html
CVE: CVE-2020-24443
Published: 2020-11-12
Description: Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/connect/apsb20-69.html; https://helpx.adobe.com/security/products/connect/apsb20-69.html
CVE: CVE-2019-11121
Published: 2020-11-12
Description: Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00262; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00262
CVE: CVE-2019-17566
Published: 2020-11-12
Description: Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://lists.apache.org/thread.html/rab94fe68b180d2e2fba97abf6fe1ec83cff826be25f86cd90f047171%40%3Ccommits.myfaces.apache.org%3E; https://lists.apache.org/thread.html/rcab14a9ec91aa4c151e[PII_REDACTED]920423eff50a22759fd21db6509%40%3Ccommits.myfaces.apache.org%3E; https://security.gentoo.org/glsa/202401-11
CVE: CVE-2020-0575
Published: 2020-11-12
Description: Improper buffer restrictions in the Intel(R) Unite Client for Windows* before version 4.2.13064 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00350; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00350
CVE: CVE-2020-0584
Published: 2020-11-12
Description: Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362
CVE: CVE-2020-0587
Published: 2020-11-12
Description: Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-754
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0588
Published: 2020-11-12
Description: Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-754
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0590
Published: 2020-11-12
Description: Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358
CVE: CVE-2020-0591
Published: 2020-11-12
Description: Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-501073.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358
CVE: CVE-2020-0592
Published: 2020-11-12
Description: Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0593
Published: 2020-11-12
Description: Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00358; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-12297
Published: 2020-11-12
Description: Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
CVE: CVE-2020-12303
Published: 2020-11-12
Description: Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
CVE: CVE-2020-12304
Published: 2020-11-12
Description: Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00391
CVE: CVE-2020-12306
Published: 2020-11-12
Description: Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00408; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00408
CVE: CVE-2020-12307
Published: 2020-11-12
Description: Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00409; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00409
CVE: CVE-2020-12308
Published: 2020-11-12
Description: Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.
CVSS Score: 6.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00410; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00410
CVE: CVE-2020-12309
Published: 2020-11-12
Description: Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362
CVE: CVE-2020-12310
Published: 2020-11-12
Description: Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362
CVE: CVE-2020-12311
Published: 2020-11-12
Description: Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362
CVE: CVE-2020-12312
Published: 2020-11-12
Description: Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00388
CVE: CVE-2020-12314
Published: 2020-11-12
Description: Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402
CVE: CVE-2020-12317
Published: 2020-11-12
Description: Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402