Categories: Security Updates

Vulnerability in Intel Processor Diagnostic Tool Let Hackers Perform Escalation of Privilege and DOS Attack

Intel released new security updates with the fixes of two vulnerabilities that affected Intel Processor Diagnostic Tool and Solid State Drives (SSD) for Data Centers (DC) S4500/S4600 Series.

Vulnerability in Processor Diagnostic Tool categorized as “High” Severity and the other vulnerability that affected Solid State Drives (SSD) S4500/S4600 Series marked as “Medium” Severity.

Intel Processor Diagnostic Tool

A software-based privilege escalation vulnerability (CVE-2019-11133) that resides in the Processor Diagnostic Tool before version 4.1.2.24 lets the attacker perform a denial of service attack and steal the sensitive information due to Improper access control.

Jesse Michael from Eclypsium initially discovered this vulnerability reported Intel under responsible disclosed policy.

Affected Products:

Intel® Processor Diagnostic Tool for 32-bit before version 4.1.2.24_32bit.
Intel® Processor Diagnostic Tool for 64-bit before version 4.1.2.24_64bit.

Intel recommends that users of Intel Processor Diagnostic Tool update to version 4.1.2.24 or later. Download Here.

Intel Solid State Drives (SSD)

Another security vulnerability ( CVE-2018-18095) that affected Intel Solid State Drives (SSD) S4500/S4600 Series firmware that used for Data Centers (DC) let unprivileged user escalate the privilege via physical access.

Affected Products:

Intel® SSD DC S4500 Series firmware before SCV10150.
Intel® SSD DC S4600 Series firmware before SCV10150.

Intel releasing firmware updates to mitigate this vulnerability and recommends updating Intel® SSD DC S4500 Series and Intel® SSD DC S4600 Series firmware to SCV10150 or later.

This vulnerability was found internally by Intel updates are available for download Here

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity course online to keep yourself updated.

Also Read:

Microsoft Released Security Update For July With the Fixes of 2 Actively Exploited Zero-Day Vulnerabilities – Update Now

Cisco Security Updates – Vulnerabilities in Cisco Products Let Hackers Gain Unauthorized Remote Access

Android Security Update – Critical Vulnerabilities Let Hackers Control Your Android Phone Remotely

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

CISA Extend Funding to MITRE to Keep CVE Program Running

The Cybersecurity and Infrastructure Security Agency (CISA) has extended funding to the MITRE Corporation, ensuring…

35 minutes ago

Windows Task Scheduler Vulnerabilities Allow Attackers Gain Admin Account Control

New vulnerabilities in Windows Task Scheduler's schtasks.exe let attackers bypass UAC, alter metadata, modify event…

55 minutes ago

Windows NTLM Vulnerability (CVE-2025-24054) Actively Exploit in the Wild to Hack Systems

A critical vulnerability in Microsoft Windows, identified as CVE-2025-24054, has been actively exploited in the…

2 hours ago

Server-Side Phishing Attacks Target Employee and Member Portals to Steal Login Credentials

Attackers have been deploying server-side phishing schemes to compromise employee and member login portals across…

3 hours ago

Beware! Online PDF Converters Tricking Users into Installing Password-Stealing Malware

CloudSEK's Security Research team, a sophisticated cyberattack leveraging malicious online PDF converters has been demonstrated…

3 hours ago

Interlock Ransomware Uses Multi-Stage Attack Through Legitimate Websites to Deliver Malicious Browser Updates

The Interlock ransomware intrusion set has escalated its operations across North America and Europe with…

3 hours ago