Xeon Gold 6148F Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-09	CVE-2021-0124	Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access. low complexity netapp intel	6.6
2022-02-09	CVE-2021-0125	Improper Initialization vulnerability in multiple products Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access. low complexity netapp intel CWE-665	6.6
2022-02-09	CVE-2021-0156	Improper Input Validation vulnerability in multiple products Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. local low complexity netapp intel CWE-20	7.8
2020-11-12	CVE-2020-0590	Improper Input Validation vulnerability in multiple products Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel netapp siemens CWE-20	7.8
2019-11-14	CVE-2019-0152	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-119	6.7
2019-11-14	CVE-2019-0151	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-119	6.7
2019-11-14	CVE-2019-11137	Improper Input Validation vulnerability in multiple products Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. local low complexity intel hpe CWE-20	8.2
2019-11-14	CVE-2019-11136	Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. local low complexity intel hpe	6.7