Intel Xeon D 1518 vulnerabilities, page 2

43 vulnerabilities

Known vulnerabilities in Intel Xeon D 1518, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.6MediumCVE-2021-0125intel · atom_c3308 +680 moreintel atom_c3308Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.EPSS0.30%7.2HighCVE-2021-33124intel · core_i3-1000g1_firmware +672 moreintel core_i3-1000g1_firmwareOut-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.EPSS0.26%7.8HighCVE-2021-33123intel · core_i3-1000g1_firmware +672 moreintel core_i3-1000g1_firmwareImproper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.EPSS0.26%5.6MediumCVE-2020-0551ubuntu · linux-azure +1324 moreubuntu linux-azureLoad value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.htmlEPSS1.08%5.6MediumCVE-2020-0550ubuntu · intel-microcode +753 moreubuntu intel-microcodeImproper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.htmlEPSS0.33%5.5MediumCVE-2022-21233Alpine Linuxalpine · intel-ucode +371 morealpine intel-ucodeImproper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.EPSS0.33%7.2HighCVE-2022-41804Alpine Linuxalpine · intel-ucode +196 morealpine intel-ucodeUnauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.EPSS0.27%8.2HighCVE-2022-26343intel · xeon_bronze_3104_firmware +208 moreintel xeon_bronze_3104_firmwareImproper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.EPSS0.25%5.5MediumCVE-2022-26373debian · linux +578 moredebian linuxNon-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.EPSS0.37%7.2HighCVE-2022-37343intel · atom_c3308 +113 moreintel atom_c3308Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.EPSS0.17%4.4MediumCVE-2022-43505intel · atom_c3308 +905 moreintel atom_c3308Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.EPSS0.17%6.1MediumCVE-2022-38083intel · core_i5-7640x_firmware +236 moreintel core_i5-7640x_firmwareImproper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.EPSS0.17%5.5MediumCVE-2022-38087intel · core_i3-1000g1_firmware +466 moreintel core_i3-1000g1_firmwareExposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.EPSS0.18%7.2HighCVE-2022-33196Alpine Linuxalpine · intel-ucode +138 morealpine intel-ucodeIncorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.EPSS0.21%6MediumCVE-2017-5703intel · atom_c2308_firmware +307 moreintel atom_c2308_firmwareConfiguration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service.EPSS0.34%8.2HighCVE-2019-11137hpe · apollo_4200_gen10_server_firmware +283 morehpe apollo_4200_gen10_server_firmwareInsufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.EPSS0.38%6.7MediumCVE-2019-11136hpe · apollo_4200_gen10_server_firmware +283 morehpe apollo_4200_gen10_server_firmwareInsufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.EPSS0.38%7.2HighCVE-2019-0151intel · core_i5-5300u_firmware +443 moreintel core_i5-5300u_firmwareInsufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.EPSS0.39%7.2HighCVE-2019-0126intel · xeon_bronze_processors_firmware +47 moreintel xeon_bronze_processors_firmwareInsufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.EPSS0.40%7.2HighCVE-2019-0119intel · hns2400lp_firmware +91 moreintel hns2400lp_firmwareBuffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.EPSS0.43%