Intel
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| RAID Web Console 3 (RWC3) | 19 | – | Aug 15, 2023 |
| Intel(R) Graphics Drivers | 16 | – | Mar 12, 2020 |
| Intel(R) Processors | 2 | – | Jan 28, 2020 |
| Driver & Support Assistant | 2 | – | May 3, 2024 |
| Intel(R) NUC Firmware | 2 | – | Mar 12, 2020 |
| Intel(R) MAX(R) 10 FPGA | 1 | – | Mar 12, 2020 |
| Intel(R) Processors Load Value Injection | 1 | – | Mar 12, 2020 |
| IPMI | 1 | – | Apr 30, 2024 |
| BlueZ | 1 | – | Mar 12, 2020 |
| Snoop Assisted L1D Sampling Advisory | 1 | – | Mar 12, 2020 |
| Intel Microprocessors | 1 | – | Jul 12, 2022 |
| Intel® Optane(TM) DC Persistent Memory Module Management Software | 1 | – | Mar 12, 2020 |
| Intel® Smart Sound Technology | 1 | – | Mar 12, 2020 |
| Intel(R) Graphics Driver | 1 | – | Mar 12, 2020 |
Exploited and recent CVEs
- CVE-2023-50197 Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability 0.2%
- CVE-2023-42099 Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability 0.3%
- CVE-2024-3411 Insufficient Randomness When Validating an IPMI Authenticated Session 0.7%
- CVE-2023-4324 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers 0.7%
- CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities 0.7%
- CVE-2023-4326 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites 0.4%
- CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute 0.7%
- CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols 0.4%
- CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file 0.6%
- CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication 0.6%
- CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux 0.6%
- CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute 0.7%
- CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation 0.7%
- CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers 0.7%
- CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions 0.8%
- CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file 0.7%
- CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI 0.7%
- CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy 0.7%
- CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter 0.6%
- CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection 0.7%
- CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup 0.7%
- CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass 0.6%
- CVE-2022-29901 Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) 5.0%
- CVE-2020-0583 Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalation of privilege via local access. This affects Intel® Smart S 0.4%
- CVE-2020-0551 Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The 1.1%
- CVE-2020-0550 Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is 0.3%
- CVE-2020-0530 Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in i 0.3%
- CVE-2020-0574 Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical ac 0.4%
- CVE-2020-0567 Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access. 0.3%
- CVE-2020-0565 Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access. 0.3%