Intel Celeron N2840 vulnerabilities

23 vulnerabilities

Known vulnerabilities in Intel Celeron N2840, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2021-0146alpineintel-ucode+73
EPSS score
0.44%
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
6.7CVE-2021-0186intelceleron_j1750_firmware+182
EPSS score
0.33%
Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.
6.7CVE-2021-0157intelceleron_n2805_firmware+483
EPSS score
3.09%
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
6.7CVE-2021-0158intelceleron_n2805_firmware+483
EPSS score
3.02%
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
6.7CVE-2020-0599intelatom_230_firmware+60
EPSS score
0.33%
Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
7.8CVE-2020-0559intelac_3165_firmware+75
EPSS score
0.29%
Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
5.6CVE-2020-0551ubuntulinux-azure+1324
EPSS score
1.08%
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
8.8CVE-2020-24489alpineintel-ucode+216
EPSS score
0.35%
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
5.5CVE-2022-21151alpineintel-ucode+439
EPSS score
0.36%
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
7.9CVE-2022-21198intelceleron_1000m_firmware+446
EPSS score
0.15%
Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
7.2CVE-2022-0004intelatom_p5921b_firmware+397
EPSS score
0.28%
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
4.4CVE-2022-43505intelatom_c3308+905
EPSS score
0.17%
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
5.3CVE-2022-27879intelatom_x5-e3930_firmware+70
EPSS score
0.18%
Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
6CVE-2022-38090alpineintel-ucode+229
EPSS score
0.25%
Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.
7.2CVE-2022-30704intelceleron_1000m_firmware+466
EPSS score
0.21%
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
7.5CVE-2017-5927allwinnera64+19
EPSS score
1.58%
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
6CVE-2017-5703intelatom_c2308_firmware+307
EPSS score
0.34%
Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service.
7.5CVE-2017-5925allwinnera64+19
EPSS score
1.58%
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
7.5CVE-2017-5926allwinnera64+19
EPSS score
1.58%
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
4.4CVE-2019-0120intelatom_230_firmware+27
EPSS score
0.35%
Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access.