Intel Xeon vulnerabilities

7 vulnerabilities

Known vulnerabilities in Intel Xeon, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.6CVE-2018-9056armcortex-a+208
EPSS score
0.67%
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
7.6CVE-2018-3652intel corporationintel xeon processor+34
EPSS score
0.37%
Existing UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable processors, and Intel Xeon Processor D Family allows a limited physical presence attacker to potentially access platform secrets via debug interfaces.
5.6CVE-2018-3693armcortex-a+244
EPSS score
8.63%
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
4.6CVE-2021-33107intelactive_management_technology_software_development_kit+179
EPSS score
0.25%
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.
5.6CVE-2017-5754alpineintel-ucode+233
EPSS score
84.17%
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
5.6CVE-2017-5753alpineintel-ucode+375
EPSS score
93.84%
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
5.6CVE-2017-5715alpinexen+440
EPSS score
74.04%
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.