FAS Bios

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-12	CVE-2022-21151	Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. local low complexity intel netapp debian	5.5
2021-06-09	CVE-2020-12357	Improper Initialization vulnerability in multiple products Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel netapp siemens CWE-665	6.7
2021-06-09	CVE-2020-12358	Out-of-bounds Write vulnerability in multiple products Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. local low complexity intel siemens netapp CWE-787	4.4
2021-06-09	CVE-2020-12359	Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access. low complexity intel netapp	6.8
2021-06-09	CVE-2020-12360	Out-of-bounds Read vulnerability in multiple products Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel netapp siemens CWE-125	7.8
2021-06-09	CVE-2020-24486	Improper Input Validation vulnerability in multiple products Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. local low complexity intel netapp siemens CWE-20	5.5
2021-06-09	CVE-2020-8670	Race Condition vulnerability in multiple products Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local high complexity intel siemens netapp CWE-362	6.4
2021-06-09	CVE-2020-8700	Improper Input Validation vulnerability in multiple products Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel netapp CWE-20	6.7
2020-11-12	CVE-2020-8764	Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel netapp	6.7
2020-11-12	CVE-2020-8740	Out-of-bounds Write vulnerability in multiple products Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel netapp CWE-787	6.7