Vulnerabilities > Improper Authentication

DATE CVE VULNERABILITY TITLE RISK
2022-11-11 CVE-2021-33159 Improper Authentication vulnerability in Intel Active Management Technology Firmware
Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-287
6.7
2022-11-11 CVE-2022-21794 Improper Authentication vulnerability in Intel products
Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-287
6.7
2022-11-11 CVE-2022-26508 Improper Authentication vulnerability in Intel Server Debug and Provisioning Tool
Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access.
network
low complexity
intel CWE-287
7.5
2022-11-11 CVE-2022-26845 Improper Authentication vulnerability in Intel Active Management Technology Firmware
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
network
low complexity
intel CWE-287
critical
9.8
2022-11-11 CVE-2022-27874 Improper Authentication vulnerability in Intel XMM 7560 Firmware
Improper authentication in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access.
low complexity
intel CWE-287
7.2
2022-11-11 CVE-2022-29893 Improper Authentication vulnerability in Intel Active Management Technology Firmware
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access.
network
low complexity
intel CWE-287
8.8
2022-11-11 CVE-2022-36370 Improper Authentication vulnerability in Intel products
Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-287
7.8
2022-11-11 CVE-2022-37345 Improper Authentication vulnerability in Intel products
Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-287
7.8
2022-11-10 CVE-2022-39038 Improper Authentication vulnerability in Flowring Agentflow 4.0.0.1183.552
Agentflow BPM enterprise management system has improper authentication.
network
low complexity
flowring CWE-287
8.8
2022-11-09 CVE-2022-39892 Improper Authentication vulnerability in Samsung Pass
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
network
low complexity
samsung CWE-287
critical
9.8