Vulnerabilities > Intel > Xeon E7 8894 V4 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-08-11 CVE-2022-38083 Improper Initialization vulnerability in Intel products
Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-665
4.4
2022-05-12 CVE-2021-0154 Improper Input Validation vulnerability in Intel products
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
local
low complexity
intel CWE-20
7.2
2022-05-12 CVE-2021-0155 Unchecked Return Value vulnerability in Intel products
Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-252
2.1
2022-05-12 CVE-2021-0189 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
local
low complexity
intel CWE-119
7.2
2022-05-12 CVE-2021-33123 Unspecified vulnerability in Intel products
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
local
low complexity
intel
7.8
2022-05-12 CVE-2021-33124 Out-of-bounds Write vulnerability in Intel products
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
local
low complexity
intel CWE-787
6.7
2019-11-14 CVE-2019-0151 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-119
6.7
2019-11-14 CVE-2019-11137 Improper Input Validation vulnerability in multiple products
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
local
low complexity
intel hpe CWE-20
8.2
2019-11-14 CVE-2019-11136 Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
local
low complexity
intel hpe
6.7
2019-09-16 CVE-2019-11184 Race Condition vulnerability in multiple products
A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access.
high complexity
intel netapp CWE-362
4.8