Vulnerabilidades em Intel

108 resultados
Análise Vexday

Com 108 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, o perfil de risco da Intel situa-se abaixo da média geral do catálogo, o que indica exposição operacional atualmente contida. No entanto, a presença de 10 vulnerabilidades com prova de conceito pública disponível representa um vetor de atenção relevante, pois facilita tentativas de exploração por atores menos sofisticados. O tipo de falha mais recorrente é CWE-327 — uso de algoritmo criptográfico quebrado ou de risco —, sugerindo que controles relacionados à implementação criptográfica devem ser prioritários nas revisões de hardening. A CVE mais perigosa identificada no conjunto, CVE-2016-8022, apresenta EPSS de 0,13, indicando probabilidade de exploração moderada-baixa, mas ainda merece monitoramento contínuo dado o histórico da classe de vulnerabilidade associada.

CVE-2016-8022—Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthEPSS 13.4%CVE-2016-8020—Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote aEPSS 9.0%CVE-2016-8023—Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allowsEPSS 7.5%CVE-2016-8017—Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote EPSS 7.3%CVE-2016-8024—Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earliEPSS 7.3%CVE-2016-8025—SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtEPSS 5.7%CVE-2016-8016—Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtainEPSS 5.3%CVE-2016-8019—Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows unauthEPSS 5.2%CVE-2022-29901MEDIUMArbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)EPSS 4.8%CVE-2016-8021—Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allowEPSS 4.1%CVE-2016-8106—A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker tEPSS 3.8%CVE-2014-9921—Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d andEPSS 2.8%CVE-2016-8018—Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticatedEPSS 2.7%CVE-2017-3896—Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 alEPSS 2.3%CVE-2013-7462—A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before paEPSS 1.5%CVE-2017-3899—SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtEPSS 1.5%CVE-2019-14615—Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticaEPSS 1.4%CVE-2017-5681—The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers EPSS 1.3%CVE-2014-9920—Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0EPSS 1.2%CVE-2020-0556—Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of priEPSS 1.0%