Intel

Products

ProductCVEsExploitedLatest
RAID Web Console 3 (RWC3)19–Aug 15, 2023
Intel(R) Graphics Drivers16–Mar 12, 2020
Intel(R) Processors2–Jan 28, 2020
Driver & Support Assistant2–May 3, 2024
Intel(R) NUC Firmware2–Mar 12, 2020
Intel(R) MAX(R) 10 FPGA1–Mar 12, 2020
Intel(R) Processors Load Value Injection1–Mar 12, 2020
IPMI1–Apr 30, 2024
BlueZ1–Mar 12, 2020
Snoop Assisted L1D Sampling Advisory1–Mar 12, 2020
Intel Microprocessors1–Jul 12, 2022
Intel® Optane(TM) DC Persistent Memory Module Management Software1–Mar 12, 2020
Intel® Smart Sound Technology1–Mar 12, 2020
Intel(R) Graphics Driver1–Mar 12, 2020

Exploited and recent CVEs

  • CVE-2023-50197 High 7.8 Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability 0.2%
  • CVE-2023-42099 High 7.8 Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability 0.3%
  • CVE-2024-3411 Critical 9.1 Insufficient Randomness When Validating an IPMI Authenticated Session 0.7%
  • CVE-2023-4324 Unrated Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers 0.7%
  • CVE-2023-4325 Unrated Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities 0.7%
  • CVE-2023-4326 Unrated Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites 0.4%
  • CVE-2023-4329 Unrated Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute 0.7%
  • CVE-2023-4331 Unrated Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols 0.4%
  • CVE-2023-4332 Unrated Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file 0.6%
  • CVE-2023-4334 Unrated Broadcom RAID Controller Web server (nginx) is serving private files without any authentication 0.6%
  • CVE-2023-4335 Unrated Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux 0.6%
  • CVE-2023-4336 Unrated Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute 0.7%
  • CVE-2023-4337 Unrated Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation 0.7%
  • CVE-2023-4338 Unrated Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers 0.7%
  • CVE-2023-4339 Unrated Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions 0.8%
  • CVE-2023-4340 Unrated Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file 0.7%
  • CVE-2023-4341 Unrated Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI 0.7%
  • CVE-2023-4342 Unrated Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy 0.7%
  • CVE-2023-4343 Unrated Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter 0.6%
  • CVE-2023-4344 Critical 9.8 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection 0.7%
  • CVE-2023-4323 Unrated Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup 0.7%
  • CVE-2023-4345 Unrated Broadcom RAID Controller web interface is vulnerable client-side control bypass 0.6%
  • CVE-2022-29901 Medium 5.6 Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) 5.0%
  • CVE-2020-0583 Unrated Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalation of privilege via local access. This affects Intel® Smart S 0.4%
  • CVE-2020-0551 Unrated Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The 1.1%
  • CVE-2020-0550 Unrated Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is 0.3%
  • CVE-2020-0530 Unrated Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in i 0.3%
  • CVE-2020-0574 Unrated Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical ac 0.4%
  • CVE-2020-0567 Unrated Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access. 0.3%
  • CVE-2020-0565 Unrated Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access. 0.3%