Priority LOW 39
Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjac…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00714 · Published 2020-08-13 · No fix listed CWE-787
Priority LOW 39
Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00684 · Published 2020-08-13 · No fix listed CWE-287
Priority LOW 39
Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjac…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00664 · Published 2020-08-13 · No fix listed CWE-287
Priority LOW 39
Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00664 · Published 2020-08-13 · No fix listed CWE-287
Priority LOW 39
Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00693 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 39
Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00693 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 38
Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of priv…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2020-08-13 · No fix listed CWE-732
Priority LOW 38
Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2020-08-13 · No fix listed CWE-787
Priority LOW 38
Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00376 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 36
Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00375 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 36
Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00346 · Published 2020-08-13 · No fix listed CWE-20
Priority LOW 36
Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00375 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 34
Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local a…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 34
Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00332 · Published 2020-08-13 · No fix listed CWE-287
Priority LOW 34
Buffer overflow in a verification process for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an authenticated user to potentially enable escalation of privilege via local ac…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00365 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 33
Insufficient access protection in firmware in Intel Server Board, Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary cod…
CVSS 3.0HIGH 7.6· Physical · No auth · No interaction · EPSS 0.00407 · Published 2018-10-10 · Fixed in 00.01.0014 CWE-732
Priority LOW 32
Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00194 · Published 2023-11-14 · No fix listed CWE-92
Priority LOW 30
Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00337 · Published 2020-08-13 · No fix listed
Priority LOW 30
Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00375 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 29
Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · User interaction · EPSS 0.00608 · Published 2020-08-13 · No fix listed CWE-79
Priority LOW 25
Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00327 · Published 2020-08-13 · No fix listed CWE-120
Priority LOW 25
Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00303 · Published 2020-08-13 · No fix listed CWE-20
Priority LOW 25
Improper access control for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00303 · Published 2020-08-13 · No fix listed
Priority LOW 25
Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable denial of service via local access.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00311 · Published 2020-08-13 · No fix listed CWE-763