intel raid web console vulnerabilities

Latest intel raid web console CVEs

Newest publication first

1. CVE-2024-28170 Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access.

   Published 2024-09-16

   Medium·CVSS 5.5 EPSS 0.15%

   Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access.

2. CVE-2024-36261 Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

   Published 2024-09-16

   Medium·CVSS 5.7 EPSS 0.22%

   Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

3. CVE-2024-36247 Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

   Published 2024-09-16

   Medium·CVSS 5.7 EPSS 0.22%

   Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

4. CVE-2024-32666 NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access.

   Published 2024-09-16

   Medium·CVSS 5.5 EPSS 0.13%

   NULL pointer dereference in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access.

5. CVE-2024-33848 Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access.

   Published 2024-09-16

   Medium·CVSS 5.5 EPSS 0.15%

   Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access.

6. CVE-2024-34545 Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access.

   Published 2024-09-16

   Medium·CVSS 5.7 EPSS 0.23%

   Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access.

7. CVE-2024-32940 Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

   Published 2024-09-16

   Medium·CVSS 5.7 EPSS 0.23%

   Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

8. CVE-2024-34153 Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

   Published 2024-09-16

   High·CVSS 7.8 EPSS 0.14%

   Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

9. CVE-2024-34543 Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

   Published 2024-09-16

   High·CVSS 7.8 EPSS 0.13%

   Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

10. CVE-2018-12161 Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access.

    Published 2018-10-10

    Medium·CVSS 6.5 EPSS 1.1%

    Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.