Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-02-17 CVE-2020-12365 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel Graphics Drivers
Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and 15.40.46.5143 may allow an authenticated user to potentially denial of service via local access.
local
low complexity
intel CWE-119
5.5
2021-02-17 CVE-2020-8765 Incorrect Default Permissions vulnerability in Intel Realsense Depth Camera Manager 1.5/2.2
Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
6.7
2021-02-17 CVE-2020-8701 Incorrect Default Permissions vulnerability in Intel Solid-State Drive Toolbox 1.0/3.3.6
Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-276
6.7
2021-02-17 CVE-2020-24505 Improper Input Validation vulnerability in Intel Ethernet Network Adapter 700 Firmware
Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-20
4.4
2021-02-17 CVE-2020-24504 Resource Exhaustion vulnerability in Intel Ethernet Network Adapter E810 Firmware
Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-400
5.5
2021-02-17 CVE-2020-24503 Unspecified vulnerability in Intel Ethernet Network Adapter E810 Firmware
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel
5.5
2021-02-17 CVE-2020-24502 Improper Input Validation vulnerability in Intel Ethernet Network Adapter E810 Firmware
Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.
local
low complexity
intel CWE-20
5.5
2021-02-17 CVE-2020-24501 Classic Buffer Overflow vulnerability in Intel Ethernet Network Adapter E810 Firmware 1.0.4
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
low complexity
intel CWE-120
6.5
2021-02-17 CVE-2020-24500 Classic Buffer Overflow vulnerability in Intel Ethernet Network Adapter E810 Firmware 1.0.4
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of service via local access.
local
low complexity
intel CWE-120
4.4
2021-02-17 CVE-2020-24498 Classic Buffer Overflow vulnerability in Intel Ethernet Network Adapter E810 Firmware 1.0.4
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-120
4.4