Intel Secl-DC vulnerabilities

4 CVEs affecting Intel Secl-DC, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-0134, published 2021-06-09.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-0133, published 2021-06-09. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access.
• CVE-2021-0134, published 2021-06-09. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.
• CVE-2021-0132, published 2021-06-09. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network…
• CVE-2021-0131, published 2021-06-09. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information…