High WID-SEC-2026-0666 10 CVEs

Intel IPU, UEFI Reference Firmware: Mehrere Schwachstellen

Published Mar 10, 2026 · Updated Jun 10, 2026 · Revision 5 · de-DE

Vendor: Dell Vendor: F5 Vendor: HP Vendor: HPE Vendor: Intel Vendor: Lenovo Product: BIG-IP Product: Computer Product: Computer Product: Computer Product: F5OS Product: Firmware Product: ProLiant Product: Synergy

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Firmware ausnutzen, um vertrauliche Informationen offenzulegen oder erhöhte Berechtigungen zu erlangen

Product

Die Firmware ist eine in die Geräte fest eingebettete Software, die dort grundlegende Funktionen leistet.

Vulnerabilities 10

High 8.7

CVE-2025-20064

Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalatio…

Mar 10, 2026
High 8.7

CVE-2025-20105

Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation…

Mar 10, 2026
High 7.1

CVE-2025-20027

Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of …

Mar 10, 2026
High 7.1

CVE-2025-20028

Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an …

Mar 10, 2026
High 7.1

CVE-2025-20068

Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalat…

Mar 10, 2026
Medium 5.9

CVE-2025-20096

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege.…

Mar 10, 2026
Medium 5.6

CVE-2025-20005

Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of pri…

Mar 10, 2026
Medium 5.6

CVE-2025-22444

Exposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an infor…

Mar 10, 2026
Medium 5.6

CVE-2025-22850

Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an i…

Mar 10, 2026
Low 1.8

CVE-2025-20073

Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an info…

Mar 10, 2026

Revision history

2026-06-10 #5
Neue Updates von F5 aufgenommen
2026-05-27 #4
Neue Updates von HP aufgenommen
2026-05-21 #3
Neue Updates von HP aufgenommen
2026-04-20 #2
Neue Updates von F5 aufgenommen
2026-03-10 #1
Initiale Fassung

References

Intel Security Advisory INTEL-SA-01393 vom 2026-03-10
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01393.html
Intel Security Advisory INTEL-SA-01234 vom 2026-03-10
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01234.html
Lenovo Security Advisory LEN-213040 vom 2026-03-10
https://support.lenovo.com/us/en/product_security/LEN-213040
Dell Security Advisory DSA-2025-206 vom 2026-03-10
https://www.dell.com/support/kbdoc/de-de/000320878/dsa-2025-206
HP Security Bulletin HPESBHF05028 vom 2026-03-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05028en_us&docLocale=en_US
F5 Security Advisory K000160902 vom 2026-04-21
https://my.f5.com/manage/s/article/K000160902
HP Security Bulletin HPSBHF04116 vom 2026-05-20
https://support.hp.com/us-en/document/ish_14921729-14921766-16/HPSBHF04116
HP Security Bulletin HPSBHF04100 vom 2026-05-20
https://support.hp.com/de-de/document/ish_14446345-14447730-16/HPSBHF04100
F5 Security Advisory K000161517 vom 2026-06-10
https://my.f5.com/manage/s/article/K000161517