Vulnerabilities > Intel > High

DATE CVE VULNERABILITY TITLE RISK
2019-11-14 CVE-2019-11170 Improper Authentication vulnerability in Intel Baseboard Management Controller Firmware 2.09
Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.
local
low complexity
intel CWE-287
7.8
2019-11-14 CVE-2019-11156 Unspecified vulnerability in Intel Proset/Wireless Wifi
Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access.
local
low complexity
intel
7.8
2019-11-14 CVE-2019-11155 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Proset/Wireless Wifi
Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
local
low complexity
intel CWE-732
7.1
2019-11-14 CVE-2019-11154 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Proset/Wireless Wifi
Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.
local
low complexity
intel CWE-732
7.1
2019-11-14 CVE-2019-11153 Out-of-bounds Write vulnerability in Intel Proset/Wireless Wifi
Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and a denial of service via local access.
local
low complexity
intel CWE-787
7.8
2019-11-14 CVE-2019-11152 Out-of-bounds Write vulnerability in Intel products
Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and information disclosure via adjacent access.
low complexity
intel CWE-787
8.8
2019-11-14 CVE-2019-11151 Out-of-bounds Write vulnerability in Intel products
Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and information disclosure via local access.
local
low complexity
intel CWE-787
7.8
2019-11-14 CVE-2019-11137 Improper Input Validation vulnerability in multiple products
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
local
low complexity
intel hpe CWE-20
8.2
2019-10-11 CVE-2019-14570 Out-of-bounds Write vulnerability in Intel products
Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
local
low complexity
intel CWE-787
7.8
2019-10-11 CVE-2019-14569 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
local
low complexity
intel CWE-119
7.8