Read the docs

Intel

Records1856All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high872CVSS 7.0–8.9

Exploited now

Intel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Bmc Firmware · all components

Priority MEDIUM 47

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be automatically proces…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02724 Published 2020-10-29 No fix listed CWE-434
Priority MEDIUM 46

Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02136 Published 2018-09-12 Fixed in 1.43.91f76955.
TI-2020-09208 CVE-2020-11483 · GHSA-vv58-j7f9-q5xc

Hard-coded credentials in NVIDIA DGX Servers

Priority MEDIUM 45

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firmware includes hard-co…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01381 Published 2020-10-29 No fix listed CWE-798
Priority LOW 39

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not sufficiently verify whet…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00783 Published 2020-10-29 No fix listed CWE-352
TI-2020-09317 CVE-2020-11615 · GHSA-f8pf-cxcq-jrhm

Hard-coded credentials in NVIDIA DGX Servers

Priority LOW 35

NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which it uses a hard-coded RC4 cipher key, which may lead to information disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01263 Published 2020-10-29 No fix listed CWE-798
TI-2020-09212 CVE-2020-11487 · GHSA-26jp-whc3-83f8

Hard-coded credentials in NVIDIA DGX Servers

Priority LOW 35

NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01274 Published 2020-10-29 No fix listed CWE-798
Priority LOW 34

Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local acces…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00293 Published 2021-02-17 No fix listed CWE-125
Priority LOW 34

Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00293 Published 2021-02-17 No fix listed CWE-20
Priority LOW 29

Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00297 Published 2021-02-17 No fix listed CWE-787
Priority LOW 29

Buffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00279 Published 2021-02-19 No fix listed CWE-120
TI-2020-09896 CVE-2020-12373 · GHSA-9j42-wwm8-235w

Memory corruption in Intel Graphics Drivers

Priority LOW 29

Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00269 Published 2021-02-17 No fix listed CWE-119
Priority LOW 29

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software does not validate th…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00254 Published 2020-10-29 No fix listed CWE-347
Priority LOW 24

Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00262 Published 2021-02-17 No fix listed CWE-798
Open these records in search →