Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Firmware ausnutzen, um seine Privilegien zu erhöhen.
Product
Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.
Vulnerabilities 4
-
Medium 6.7
Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to pot…
-
Medium 6.7
Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated us…
-
Medium 6.7
Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user …
-
Medium 6.7
Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentiall…
Revision history
-
#2
Neue Updates von HP aufgenommen
-
#1
Initiale Fassung
References
-
Intel Security Advisory INTEL-SA-00953 vom 2024-02-13
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html
-
Dell Security Advisory DSA-2023-365 vom 2024-02-14
https://www.dell.com/support/kbdoc/000217985/dsa-2023-=
-
Lenovo Security Advisory LEN-154269 vom 2024-02-14
https://support.lenovo.com/us/en/product_security/LEN-154269
-
Dell Security Advisory DSA-2023-363 vom 2024-02-14
https://www.dell.com/support/kbdoc/000217982/dsa-2023-=
-
HP Security Bulletin HPSBHF03912 vom 2024-02-13
https://support.hp.com/us-en/document/ish_10145124-10145158-16/HPSBHF03912