Intel Xeon D-1649n Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Intel Xeon D-1649n Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (28)

• CVE-2023-23583 — CVSS 8.8 (high): Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially…
• CVE-2022-26343 — CVSS 8.2 (high): Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2019-11137 — CVSS 8.2 (high): Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R)…
• CVE-2021-0116 — CVSS 7.8 (high): Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of…
• CVE-2021-0154 — CVSS 7.8 (high): Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation…
• CVE-2021-0117 — CVSS 7.8 (high): Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege…
• CVE-2021-33123 — CVSS 7.8 (high): Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially…
• CVE-2021-0156 — CVSS 7.8 (high): Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation…
• CVE-2022-33196 — CVSS 7.2 (high): Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software…
• CVE-2022-41804 — CVSS 7.2 (high): Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to…
• CVE-2022-37343 — CVSS 7.2 (high): Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2019-11136 — CVSS 6.7 (medium): Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable…
• CVE-2021-0118 — CVSS 6.7 (medium): Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of…
• CVE-2019-0119 — CVSS 6.7 (medium): Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R)…
• CVE-2019-0126 — CVSS 6.7 (medium): Insufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Processor D Family may…
• CVE-2021-33124 — CVSS 6.7 (medium): Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable…
• CVE-2021-0125 — CVSS 6.6 (medium): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2021-0124 — CVSS 6.6 (medium): Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2018-12207 — CVSS 6.5 (medium): Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an…
• CVE-2021-0119 — CVSS 6.2 (medium): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…
• CVE-2022-38083 — CVSS 6.1 (medium): Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information…
• CVE-2023-23908 — CVSS 6.0 (medium): Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable…
• CVE-2022-26373 — CVSS 5.5 (medium): Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to…
• CVE-2022-21233 — CVSS 5.5 (medium): Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure…
• CVE-2021-0155 — CVSS 5.5 (medium): Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information…
• CVE-2019-14607 — CVSS 5.3 (medium): Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of…
• CVE-2022-43505 — CVSS 4.1 (medium): Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
• CVE-2022-38087 — CVSS 4.1 (medium): Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…