deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-41102
Published: 2025-11-11
Description: HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/events/save'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-framework
CVE: CVE-2025-10161
Published: 2025-11-11
Description: Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This issue affects Perfektive: before Version: 12574 Build: 2701.
CVSS Score: 7.3 (HIGH)
CWE: CWE-307, CWE-602, CWE-807
References: https://www.usom.gov.tr/bildirim/tr-25-0387
CVE: CVE-2025-41103
Published: 2025-11-11
Description: HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'reply_message' in '/messages/reply'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-framework
CVE: CVE-2025-41104
Published: 2025-11-11
Description: HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'custom_field_1' in '/estimate_requests/save_estimate_request'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-framework
CVE: CVE-2025-41105
Published: 2025-11-11
Description: HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-framework
CVE: CVE-2025-41106
Published: 2025-11-11
Description: HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-framework
CVE: CVE-2025-8324
Published: 2025-11-11
Description: Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/analytics-plus/CVE-2025-8324.html
CVE: CVE-2025-11084
Published: 2025-11-11
Description: A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
CWE: CWE-1390
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1758.html
CVE: CVE-2025-11085
Published: 2025-11-11
Description: A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.
CWE: CWE-116
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1758.html
CVE: CVE-2025-11696
Published: 2025-11-11
Description: A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.
CWE: CWE-22
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1760.html
CVE: CVE-2025-11697
Published: 2025-11-11
Description: A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.
CWE: CWE-200
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1760.html
CVE: CVE-2025-11862
Published: 2025-11-11
Description: A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.
CWE: CWE-863
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1759.html
CVE: CVE-2025-12101
Published: 2025-11-11
Description: Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CWE: CWE-79
References: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486
CVE: CVE-2025-9223
Published: 2025-11-11
Description: Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-9223.html
CVE: CVE-2025-9227
Published: 2025-11-11
Description: Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/itom/advisory/cve-2025-9227.html
CVE: CVE-2024-57695
Published: 2025-11-11
Description: An issue in Agnitum Outpost Security Suite 7.5.3 (3[PII_REDACTED]) and 7.6 (3[PII_REDACTED]) allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 (4[PII_REDACTED]) from December 17, 2012.
CVSS Score: 7.7 (HIGH)
CWE: CWE-77
References: https://habr.com/en/articles/161393/; https://www.youtube.com/watch?v=fvgD884wCX8
CVE: CVE-2025-11959
Published: 2025-11-11
Description: Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.This issue affects Excavation Management Information System: before v.10.2025.01.
CVSS Score: 8.1 (HIGH)
CWE: CWE-359, CWE-552
References: https://www.usom.gov.tr/bildirim/tr-25-0388
CVE: CVE-2025-10905
Published: 2025-11-11
Description: Collision in MiniFilter driver in Avast Software Avast Free Antivirus  before 25.9  on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-693
References: https://www.gendigital.com/us/en/contact-us/security-advisories/)
CVE: CVE-2025-10918
Published: 2025-11-11
Description: Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk
CVSS Score: 7.1 (HIGH)
CWE: CWE-276
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2025-for-EPM-2024?language=en_US
CVE: CVE-2025-13012
Published: 2025-11-11
Description: Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1991458; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13013
Published: 2025-11-11
Description: Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-288
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1991945; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13014
Published: 2025-11-11
Description: Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1994241; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13015
Published: 2025-11-11
Description: Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.
CVSS Score: 3.4 (LOW)
CWE: CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1994164; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13016
Published: 2025-11-11
Description: Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1992130; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13017
Published: 2025-11-11
Description: Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-942
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1980904; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13018
Published: 2025-11-11
Description: Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1984940; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13019
Published: 2025-11-11
Description: Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-942
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1988412; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13020
Published: 2025-11-11
Description: Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1995686; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-88/
CVE: CVE-2025-13021
Published: 2025-11-11
Description: Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-703
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1986431; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-13022
Published: 2025-11-11
Description: Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-703
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1988488; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-13023
Published: 2025-11-11
Description: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-703
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1992032; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-13024
Published: 2025-11-11
Description: JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-733
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1992902; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-13025
Published: 2025-11-11
Description: Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1994022; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-13026
Published: 2025-11-11
Description: Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-703
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1994441; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-13027
Published: 2025-11-11
Description: Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1987237%2C1990079%2C1991715%2C1994994; https://www.mozilla.org/security/advisories/mfsa2025-87/; https://www.mozilla.org/security/advisories/mfsa2025-90/
CVE: CVE-2025-64773
Published: 2025-11-11
Description: In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit
CVSS Score: 2.7 (LOW)
CWE: CWE-362, CWE-362
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-9408
Published: 2025-11-11
Description: System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.
CVSS Score: 8.1 (HIGH)
CWE: CWE-270
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3r6j-5mp3-75wr
CVE: CVE-2025-12940
Published: 2025-11-11
Description: Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610
and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6
Access Points). An user having access to the syslog server can read the logs containing these credentials. 

This issue affects WAX610: before 10.8.11.4; WAX610Y: before 10.8.11.4.


Devices
managed with Insight get automatic updates. If not, please check the firmware version
and update to the latest. 





Fixed in:



WAX610 firmware
11.8.0.10 or later.



WAX610Y firmware
11.8.0.10 or later.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025; https://www.netgear.com/support/product/wax610; https://www.netgear.com/support/product/wax610y
CVE: CVE-2025-12942
Published: 2025-11-11
Description: Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025; https://www.netgear.com/support/product/r6260; https://www.netgear.com/support/product/r6850
CVE: CVE-2025-12943
Published: 2025-11-11
Description: Improper certificate
validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream
AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band
WiFi 6E Router) allows attackers with the ability to intercept and
tamper traffic destined to the device to execute arbitrary commands on the
device.

Devices
with automatic updates enabled may already have this patch applied. If not,
please check the firmware version and update to the
latest.



Fixed in:



RAX30 firmware
1.0.14.108 or later.



RAXE300 firmware
1.0.9.82 or later
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025; https://www.netgear.com/support/product/rax30; https://www.netgear.com/support/product/raxe300
CVE: CVE-2025-12944
Published: 2025-11-11
Description: Improper input validation
in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with
direct network access to the device to potentially execute code on the device.

Please check the firmware version and update to the latest.



Fixed
in:



 DGN2200v4
firmware 1.0.0.132 or later
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025; https://www.netgear.com/support/product/dgn2200v4
CVE: CVE-2025-13032
Published: 2025-11-11
Description: Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-367
References: https://www.gendigital.com/us/en/contact-us/security-advisories/
CVE: CVE-2025-20010
Published: 2025-11-11
Description: Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1104
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html
CVE: CVE-2025-20050
Published: 2025-11-11
Description: Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-20056
Published: 2025-11-11
Description: Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01355.html
CVE: CVE-2025-20065
Published: 2025-11-11
Description: Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01303.html
CVE: CVE-2025-20614
Published: 2025-11-11
Description: External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-73
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE: CVE-2025-20622
Published: 2025-11-11
Description: Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before version 32.0.100.4023 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVSS Score: 3.8 (LOW)
CWE: CWE-226
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01304.html