deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-33086
Published: 2021-11-17
Description: Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00567.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00567.html
CVE: CVE-2021-33087
Published: 2021-11-17
Description: Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33088
Published: 2021-11-17
Description: Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33089
Published: 2021-11-17
Description: Improper access control in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.html
CVE: CVE-2021-33090
Published: 2021-11-17
Description: Incorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.html
CVE: CVE-2021-33091
Published: 2021-11-17
Description: Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33092
Published: 2021-11-17
Description: Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33093
Published: 2021-11-17
Description: Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33094
Published: 2021-11-17
Description: Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33095
Published: 2021-11-17
Description: Unquoted search path in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html
CVE: CVE-2021-33106
Published: 2021-11-17
Description: Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00584.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00584.html
CVE: CVE-2021-41164
Published: 2021-11-17
Description: CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417; https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VR76VBN5GW5QUBJFHVXRX36UZ6YTCMW6/
CVE: CVE-2021-42361
Published: 2021-11-17
Description: The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the ~/trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.3.24. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2628041%40contact-form-to-email&new=2628041%40contact-form-to-email&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42361; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2628041%40contact-form-to-email&new=2628041%40contact-form-to-email&sfp_email=&sfph_mail=
CVE: CVE-2021-43551
Published: 2021-11-17
Description: A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim's user permissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-313-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-313-05
CVE: CVE-2021-43553
Published: 2021-11-17
Description: PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.
CVSS Score: 3.1 (LOW)
CWE: CWE-863, CWE-863
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-313-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-313-05
CVE: CVE-2021-43979
Published: 2021-11-17
Description: Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control. The data replication mechanism allows policies to access the Kubernetes cluster state. During data replication, OPA/Gatekeeper does not wait for the replication to finish before processing a request, which might cause inconsistencies between the replicated resources in OPA/Gatekeeper and the resources actually present in the cluster. Inconsistency can later be reflected in a policy bypass. NOTE: the vendor disagrees that this is a vulnerability, because Kubernetes states are only eventually consistent
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-670
References: https://github.com/hkerma/opa-gatekeeper-concurrency-issue; https://github.com/open-policy-agent/gatekeeper/releases; https://github.com/hkerma/opa-gatekeeper-concurrency-issue
CVE: CVE-2020-8741
Published: 2021-11-17
Description: Improper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all versions, for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00393.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00393.html
CVE: CVE-2021-0013
Published: 2021-11-17
Description: Improper input validation for Intel(R) EMA before version 1.5.0 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00482.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00482.html
CVE: CVE-2021-0053
Published: 2021-11-17
Description: Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an authenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0063
Published: 2021-11-17
Description: Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0064
Published: 2021-11-17
Description: Insecure inherited permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0065
Published: 2021-11-17
Description: Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0069
Published: 2021-11-17
Description: Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0071
Published: 2021-11-17
Description: Improper input validation in firmware for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0075
Published: 2021-11-17
Description: Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0078
Published: 2021-11-17
Description: Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0079
Published: 2021-11-17
Description: Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0082
Published: 2021-11-17
Description: Uncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
CVE: CVE-2021-0110
Published: 2021-11-17
Description: Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00533.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00533.html
CVE: CVE-2021-0120
Published: 2021-11-17
Description: Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00566.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00566.html
CVE: CVE-2021-0135
Published: 2021-11-17
Description: Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00524.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00524.html
CVE: CVE-2021-0146
Published: 2021-11-17
Description: Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0148
Published: 2021-11-17
Description: Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00535.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00535.html
CVE: CVE-2021-0151
Published: 2021-11-17
Description: Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00540.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00540.html
CVE: CVE-2021-0152
Published: 2021-11-17
Description: Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00540.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00540.html
CVE: CVE-2021-0157
Published: 2021-11-17
Description: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html
CVE: CVE-2021-0158
Published: 2021-11-17
Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html
CVE: CVE-2021-0180
Published: 2021-11-17
Description: Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable privilege escalation via local access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-400
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00544.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00544.html
CVE: CVE-2021-0182
Published: 2021-11-17
Description: Uncontrolled resource consumption in the Intel(R) HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable information disclosure via local access.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00544.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00544.html
CVE: CVE-2021-0186
Published: 2021-11-17
Description: Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00548.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00548.html
CVE: CVE-2021-0197
Published: 2021-11-17
Description: Protection mechanism failure in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to enable a denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0198
Published: 2021-11-17
Description: Improper access control in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0199
Published: 2021-11-17
Description: Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0200
Published: 2021-11-17
Description: Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00554.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33058
Published: 2021-11-17
Description: Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33059
Published: 2021-11-17
Description: Improper input validation in the Intel(R) Administrative Tools for Intel(R) Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33062
Published: 2021-11-17
Description: Incorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler before version 2021.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00556.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00556.html