Overview 48 matches · 2 in Waratek scope · 2 protected · 3 exploited · 3 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
48matches
2in Waratek scope4.2%
2protected4.2%
3exploited6.2%
3CISA KEV6.2%
3public PoC6.2%
3EPSS ≥ 0.56.2%
Protected by Waratek
2
4.2%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
5
10.4%
Not applicable
41
85.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
4.2%
partly blocked
0
0.0%
not blocked
46
95.8%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
3
6.2%
Working exploit published
0
0.0%
Proof of concept only
1
2.1%
Forecast only
0
0.0%
No public exploit
44
91.7%
split by
peak 9 / year
20175
Not applicable5
Critical5
not blocked5
Exploited1
No public exploit4
20183
Outside Waratek scope1
Not applicable2
Critical3
not blocked3
No public exploit3
20198
Not applicable8
Critical8
not blocked8
No public exploit8
20209
Outside Waratek scope3
Not applicable6
Critical9
not blocked9
No public exploit9
20213
Protected by Waratek2
Not applicable1
Critical3
blocked by ARMR today2
not blocked1
Exploited2
No public exploit1
20229
Not applicable9
Critical9
not blocked9
Proof of concept only1
No public exploit8
20238
Outside Waratek scope1
Not applicable7
Critical8
not blocked8
No public exploit8
20243
Not applicable3
Critical3
not blocked3
No public exploit3
20172018201920202021202220232024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-24986 | Critical | 2024-08-14 | Not applicable | No public exploit | Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23981 | Critical | 2024-08-14 | Not applicable | No public exploit | Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2024-23497 | Critical | 2024-08-14 | Not applicable | No public exploit | Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-31273 | Critical | 2023-11-14 | Outside Waratek scope | No public exploit | Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2023-27515 | Critical | 2023-08-11 | Not applicable | No public exploit | Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2023-25775 | Critical | 2023-08-11 | Not applicable | No public exploit | Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-29887 | Critical | 2023-08-11 | Not applicable | No public exploit | Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-33964 | Critical | 2023-02-16 | Not applicable | No public exploit | Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-29514 | Critical | 2023-02-16 | Not applicable | No public exploit | Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-26843 | Critical | 2023-02-16 | Not applicable | No public exploit | Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R) oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-25987 | Critical | 2023-02-16 | Not applicable | No public exploit | Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version 2021.6 for Intel(R) oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-29486 | Critical | 2022-11-11 | Not applicable | No public exploit | Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-26845 | Critical | 2022-11-11 | Not applicable | No public exploit | Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-26513 | Critical | 2022-11-11 | Not applicable | No public exploit | Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. |
| CVE-2022-30601 | Critical | 2022-08-18 | Not applicable | No public exploit | Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access. |
| CVE-2022-25899 | Critical | 2022-08-18 | Not applicable | No public exploit | Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-22730 | Critical | 2022-08-18 | Not applicable | No public exploit | Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2022-32292 | Critical | 2022-08-03 | Not applicable | No public exploit | In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code. |
| CVE-2022-23097 | Critical | 2022-01-28 | Not applicable | No public exploit | An issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a strnlen call, leading to an out-of-bounds read. |
| CVE-2022-23096 | Critical | 2022-01-28 | Not applicable | Proof of concept only | An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an out-of-bounds read. |
| CVE-2021-45046 | Critical | 2021-12-14 | Protected by Waratek | Exploited | It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default. |
| CVE-2021-44228 | Critical | 2021-12-10 | Protected by Waratek | Exploited | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects. |
| CVE-2021-33833 | Critical | 2021-06-09 | Not applicable | No public exploit | ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA). |
| CVE-2020-12338 | Critical | 2020-11-13 | Not applicable | No public exploit | Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2020-8752 | Critical | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access. |
| CVE-2020-8747 | Critical | 2020-11-12 | Outside Waratek scope | No public exploit | Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access. |
| CVE-2020-12315 | Critical | 2020-11-12 | Not applicable | No public exploit | Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2020-11486 | Critical | 2020-10-29 | Not applicable | No public exploit | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be automatically processed within the product's environment, which may lead to remote code execution. |
| CVE-2020-11483 | Critical | 2020-10-29 | Not applicable | No public exploit | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firmware includes hard-coded credentials, which may lead to elevation of privileges or information disclosure. |
| CVE-2020-8758 | Critical | 2020-09-10 | Outside Waratek scope | No public exploit | Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access. |
| CVE-2020-0595 | Critical | 2020-06-15 | Not applicable | No public exploit | Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2020-0594 | Critical | 2020-06-15 | Not applicable | No public exploit | Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-11131 | Critical | 2019-12-18 | Not applicable | No public exploit | Logic issue in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-11107 | Critical | 2019-12-18 | Not applicable | No public exploit | Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-11171 | Critical | 2019-11-14 | Not applicable | No public exploit | Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access. |
| CVE-2019-11168 | Critical | 2019-11-14 | Not applicable | No public exploit | Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access. |
| CVE-2019-11119 | Critical | 2019-06-13 | Not applicable | No public exploit | Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-0172 | Critical | 2019-05-17 | Not applicable | No public exploit | A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access. |
| CVE-2019-0153 | Critical | 2019-05-17 | Not applicable | No public exploit | Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
| CVE-2019-0101 | Critical | 2019-02-18 | Not applicable | No public exploit | Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escalation of privilege to the Intel Unite(R) Solution administrative portal via network access. |
| CVE-2018-3679 | Critical | 2018-09-12 | Outside Waratek scope | No public exploit | Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges. |
| CVE-2018-12171 | Critical | 2018-09-12 | Not applicable | No public exploit | Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network. |
| CVE-2018-3641 | Critical | 2018-04-03 | Not applicable | No public exploit | Escalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to inject keystrokes as a local user. |
| CVE-2017-5719 | Critical | 2017-11-21 | Not applicable | No public exploit | A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user. |
| CVE-2017-5738 | Critical | 2017-11-16 | Not applicable | No public exploit | Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker with network access to cause a denial of service and/or information disclosure. |
| CVE-2017-12865 | Critical | 2017-08-29 | Not applicable | No public exploit | Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted response query string passed to the "name" variable. |
| CVE-2017-5691 | Critical | 2017-07-26 | Not applicable | No public exploit | Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state. |
| CVE-2017-5689 | Critical | 2017-05-02 | Not applicable | Exploited | An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT). |