Intel Server Debug And Provisioning Tool vulnerabilities

4 CVEs affecting Intel Server Debug And Provisioning Tool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36253, published 2024-11-13.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26508, published 2022-11-11. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access.
• CVE-2024-36253, published 2024-11-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2024-35201, published 2024-11-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permissions in the Intel(R) SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access.
• CVE-2023-31246, published 2023-08-11. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.