Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-02-13 CVE-2019-14598 Improper Authentication vulnerability in multiple products
Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.
local
low complexity
intel netapp CWE-287
6.7
2020-01-28 CVE-2020-0549 Improper Resource Shutdown or Release vulnerability in multiple products
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.5
2020-01-28 CVE-2020-0548 Improper Resource Shutdown or Release vulnerability in Intel products
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-404
5.5
2020-01-17 CVE-2019-14629 Incorrect Permission Assignment for Critical Resource vulnerability in Intel Data Analytics Acceleration Library
Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-732
5.5
2020-01-17 CVE-2019-14615 Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.
local
low complexity
canonical intel
5.5
2020-01-17 CVE-2019-14600 Uncontrolled Search Path Element vulnerability in Intel Snmp Subagent Stand-Alone
Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-427
6.7
2020-01-17 CVE-2019-14596 Unspecified vulnerability in Intel Chipset INF Utility
Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel
5.5
2019-12-18 CVE-2019-11110 Unspecified vulnerability in Intel products
Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel
6.7
2019-12-18 CVE-2019-11109 Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel f5
4.4
2019-12-18 CVE-2019-11108 Improper Input Validation vulnerability in Intel Converged Security Management Engine Firmware
Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-20
6.7