Vulnerabilities > Intel > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-01-23 CVE-2015-1142857 7PK - Security Features vulnerability in multiple products
On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF.
network
low complexity
intel linux dpdk CWE-254
5.0
2018-01-18 CVE-2017-5696 Untrusted Search Path vulnerability in Intel Graphics Driver
Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access.
network
intel CWE-426
6.8
2018-01-04 CVE-2017-5754 Information Exposure vulnerability in multiple products
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
local
intel arm CWE-200
4.7
2018-01-04 CVE-2017-5753 Information Exposure Through Discrepancy vulnerability in multiple products
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
4.7
2017-11-16 CVE-2017-5738 Information Exposure vulnerability in Intel Unite 3.1.32.12/3.1.41.18/3.1.45.26
Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker with network access to cause a denial of service and/or information disclosure.
network
low complexity
intel CWE-200
6.4
2017-10-11 CVE-2017-5722 Improper Privilege Management vulnerability in Intel products
Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.
local
intel CWE-269
4.4
2017-10-11 CVE-2017-5721 Improper Input Validation vulnerability in Intel products
Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.
local
intel CWE-20
4.4
2017-10-11 CVE-2017-5701 Unspecified vulnerability in Intel products
Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows an attacker with physical presence to run arbitrary code via unauthorized firmware modification during BIOS Recovery.
local
intel
4.4
2017-09-05 CVE-2017-5698 Unspecified vulnerability in Intel products
Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions 11.0.25.3001 and 11.0.26.3000 anti-rollback will not prevent upgrading to firmware version 11.6.x.1xxx which is vulnerable to CVE-2017-5689 and can be performed by a local user with administrative privileges.
local
low complexity
intel
4.4
2017-08-09 CVE-2017-5694 Unspecified vulnerability in Intel SSD PRO 6000P Firmware Psf104P/Psf109P
Data corruption vulnerability in firmware in Intel Solid-State Drive Professional PSF104P, PSF109P allows local users to cause a denial of service via unspecified vectors.
local
low complexity
intel
4.9