Browse CVEs

HIGH 7.8 CVE-2021-33064 Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentially enable… System Studio Mitigation only Fix from $1,9502022-11-11 MEDIUM 6.7 CVE-2021-33159 Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a pri… Active Management Technology Firmware 11.8.93 / 11.12.93+ Fix from $1,6002022-11-11 MEDIUM 6.7 CVE-2021-33164 Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escala… Nuc 8 Mainstream G Kit Nuc8i7inh Firmware Patch available Fix from $1,6002022-11-11 MEDIUM 6.7 CVE-2022-21794 Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before versi… Nuc Kit Nuc8i7hnk Firmware Mitigation only Fix from $1,6002022-11-11 MEDIUM 6.7 CVE-2022-26006 Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege… Core I5 7640x Firmware Mitigation only Fix from $1,6002022-11-11 MEDIUM 6.4 CVE-2022-21198 Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalati… Celeron 1000m Firmware Mitigation only Fix from $1,6002022-11-11 MEDIUM 6.5 CVE-2021-26251 Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial of servic… Openvino 2021.4.2+ Fix from $1,6002022-11-11 MEDIUM 6.7 CVE-2021-0185 Improper input validation in the firmware for some Intel(R) Server Board M10JNP Family before version 7.216 may allow a privileged user to potentiall… M10jnp2sb Firmware 7.216+ Fix from $1,6002022-11-10 HIGH 8.8 CVE-2022-40250 An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an enviro… Nuc M15 Laptop Kit Lapbc510 Firmware No fix yet Fix from $1,9502022-09-20 HIGH 8.2 CVE-2022-26873 A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitiga… Nuc M15 Laptop Kit Lapbc510 Firmware No fix yet Fix from $1,9502022-09-20 HIGH 8.2 CVE-2022-40261 An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an enviro… Nuc M15 Laptop Kit Lapbc510 Firmware No fix yet Fix from $1,9502022-09-20 HIGH 7.2 CVE-2022-40246 A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequ… Nuc M15 Laptop Kit Lapbc510 Firmware No fix yet Fix from $1,9502022-09-20 MEDIUM 6.8 CVE-2021-33076 Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege… Ssd 600p Firmware 002c / 003c+ Fix from $1,6002022-09-20 CRITICAL 9.8 CVE-2022-30601 Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable inf… Standard Manageability Mitigation only Fix from $2,3002022-08-18 HIGH 7.8 CVE-2022-27493 Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an … Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-28858 Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable… Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-33209 Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable e… Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-34488 Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enabl… Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 HIGH 7.2 CVE-2022-32579 Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable esc… Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 MEDIUM 6.8 CVE-2022-28697 Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable esca… Standard Manageability Mitigation only Fix from $1,6002022-08-18 MEDIUM 6.2 CVE-2022-34345 Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable e… Lapbc510 Firmware Patch available Fix from $1,6002022-08-18 MEDIUM 5.5 CVE-2022-30944 Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable informati… Standard Manageability Mitigation only Fix from $1,6002022-08-18 HIGH 7.8 CVE-2022-26374 Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalatio… Single Event Api Mitigation only Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-26844 Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to potentially e… Single Event Api Mitigation only Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-28696 Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escala… Distribution For Python 2022.0.3+ Fix from $1,9502022-08-18 HIGH 7.5 CVE-2022-30296 Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to poten… Datacenter Group Event Mitigation only Fix from $1,9502022-08-18 MEDIUM 5.5 CVE-2022-27500 Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable info… Support 21.7.40+ Fix from $1,6002022-08-18 MEDIUM 5.5 CVE-2022-29507 Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authenticated user to potentially enab… Team Blue Mitigation only Fix from $1,6002022-08-18 CRITICAL 9.8 CVE-2022-22730 Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially e… Edge Insights For Industrial 2.6.1+ Fix from $2,3002022-08-18 CRITICAL 9.8 CVE-2022-25899 Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated use… Open Active Management Technology Cloud Toolkit 2.0.2 / 2.2.2+ Fix from $2,3002022-08-18