Thursday, January 23, 2025
HomeSecurity UpdatesVulnerability in Intel Processor Diagnostic Tool Let Hackers Perform Escalation of Privilege...

Vulnerability in Intel Processor Diagnostic Tool Let Hackers Perform Escalation of Privilege and DOS Attack

Published on

SIEM as a Service

Follow Us on Google News

Intel released new security updates with the fixes of two vulnerabilities that affected Intel Processor Diagnostic Tool and Solid State Drives (SSD) for Data Centers (DC) S4500/S4600 Series.

Vulnerability in Processor Diagnostic Tool categorized as “High” Severity and the other vulnerability that affected Solid State Drives (SSD) S4500/S4600 Series marked as “Medium” Severity.

Intel Processor Diagnostic Tool

A software-based privilege escalation vulnerability (CVE-2019-11133) that resides in the Processor Diagnostic Tool before version 4.1.2.24 lets the attacker perform a denial of service attack and steal the sensitive information due to Improper access control.

Jesse Michael from Eclypsium initially discovered this vulnerability reported Intel under responsible disclosed policy.

Affected Products:

Intel® Processor Diagnostic Tool for 32-bit before version 4.1.2.24_32bit.
Intel® Processor Diagnostic Tool for 64-bit before version 4.1.2.24_64bit.

Intel recommends that users of Intel Processor Diagnostic Tool update to version 4.1.2.24 or later. Download Here.

Intel Solid State Drives (SSD)

Another security vulnerability ( CVE-2018-18095) that affected Intel Solid State Drives (SSD) S4500/S4600 Series firmware that used for Data Centers (DC) let unprivileged user escalate the privilege via physical access.

Affected Products:

Intel® SSD DC S4500 Series firmware before SCV10150.
Intel® SSD DC S4600 Series firmware before SCV10150.

Intel releasing firmware updates to mitigate this vulnerability and recommends updating Intel® SSD DC S4500 Series and Intel® SSD DC S4600 Series firmware to SCV10150 or later.

This vulnerability was found internally by Intel updates are available for download Here

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity course online to keep yourself updated.

Also Read:

Microsoft Released Security Update For July With the Fixes of 2 Actively Exploited Zero-Day Vulnerabilities – Update Now

Cisco Security Updates – Vulnerabilities in Cisco Products Let Hackers Gain Unauthorized Remote Access

Android Security Update – Critical Vulnerabilities Let Hackers Control Your Android Phone Remotely

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

GhostGPT – Jailbreaked ChatGPT that Creates Malware & Exploits

Artificial intelligence (AI) tools have revolutionized how we approach everyday tasks, but they also...

Tycoon 2FA Phishing Kit Using Specially Crafted Code to Evade Detection

The rapid evolution of Phishing-as-a-Service (PhaaS) platforms is reshaping the threat landscape, enabling attackers...

Nnice Ransomware Attacking Windows Systems With Advanced Encryption Techniques

CYFIRMA's Research and Advisory team has identified a new strain of ransomware labeled "Nnice,"...

Microsoft Unveils New Identity Secure Score Recommendations in General Availability

Microsoft has announced the general availability of 11 new Identity Secure Score recommendations in...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

CISA Released A Free Guide to Enhance OT Product Security

To address rising cyber threats targeting critical infrastructure, the U.S. Cybersecurity and Infrastructure Security...

Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw

Microsoft has disclosed two Critical remote code execution vulnerabilities in MSMQ (Microsoft Message Queuing)...

Microsoft Unveild New Windows 11 Features To Strengthen Security

Microsoft has been prioritizing security in Windows, as they introduced Secured-Core PCs to protect...