Intel Xeon e3-1270 v6 Firmware vulnerabilities
14 CVEs affecting Intel Xeon e3-1270 v6 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43505, published 2023-08-11.
More from Intel.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2022-40982, published 2023-08-11. Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days. Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable…
- CVE-2018-12207, published 2019-11-14. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host…
- CVE-2019-0154, published 2019-11-14. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold…
- CVE-2019-0117, published 2019-11-14. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families;…
- CVE-2019-0151, published 2019-11-14. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local…
- CVE-2019-0123, published 2019-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2019-0124, published 2019-11-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2022-21180, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
- CVE-2021-0189, published 2022-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- CVE-2021-0188, published 2022-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Latest
- CVE-2022-43505, published 2023-08-11. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
- CVE-2021-33124, published 2022-05-12. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- CVE-2021-33123, published 2022-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
- CVE-2021-0154, published 2022-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.