Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-08-11 CVE-2021-0008 Resource Exhaustion vulnerability in Intel Ethernet Controller E810 Firmware 1.3.19/1.4.11/1.5.1.0
Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-400
4.4
2021-08-11 CVE-2021-0009 Out-of-bounds Read vulnerability in Intel Ethernet Controller E810 Firmware 1.3.19/1.4.11/1.5.1.0
Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
low complexity
intel CWE-125
6.5
2021-08-11 CVE-2021-0012 Use After Free vulnerability in Intel Graphics Driver and Graphics Drivers
Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-416
5.5
2021-08-11 CVE-2021-0083 Improper Input Validation vulnerability in Intel Optane Persistent Memory Firmware 1.2.0.5446
Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-20
4.4
2021-07-14 CVE-2021-0144 Insecure Default Initialization of Resource vulnerability in Intel products
Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.
local
low complexity
intel CWE-1188
6.7
2021-06-09 CVE-2020-24475 Improper Initialization vulnerability in Intel Baseboard Management Controller Firmware 2.09/2.18
Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-665
5.5
2021-06-09 CVE-2021-0001 Information Exposure Through Discrepancy vulnerability in Intel products
Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.
local
high complexity
intel CWE-203
4.7
2021-06-09 CVE-2021-0051 Improper Input Validation vulnerability in Intel Server Platform Services
Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-20
4.4
2021-06-09 CVE-2021-0054 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-119
6.7
2021-06-09 CVE-2021-0067 Unspecified vulnerability in Intel products
 Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel
6.7