CVE Intelligence

Intel vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Intel products: 154 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2017-5754 Medium · 5.6 CWE-200 Jan 4, 2018
Exposure of Sensitive Information in Intel Atom C
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
CVE-2015-2291 High · 7.8 KEV Urgent · 89 Public exploit Ransomware CWE-20 Aug 9, 2017
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVE-2017-5689 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-269 May 2, 2017
Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CVE-2013-4786 High · 7.5 Public exploit CWE-255 Jul 8, 2013
Credentials Management Errors in Oracle Fujitsu M10 Firmware
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.