Intel Firmware

Name: Intel Firmware
Brand: Intel

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical6high2medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-32280US	—	0.48% (41st)	—	no fix	2024-02-14	≤ OpenBCM <egs-1.05
CVE-2024-25571US	—	0.22% (12th)	—	no fix	2025-02-12	≤ SPS <SPS_E5_06.01.04.059.0
CVE-2023-31189US	high8.8	0.21% (11th)	—	no fix	2024-02-14	2 versions
CVE-2022-36400US	high7.8	0.19% (8th)	—	NUC kit wireless adapter 22.40	2022-11-11	< NUC kit wireless adapter 22.40
CVE-2024-31158US	—	0.18% (8th)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2024-31154US	—	0.18% (8th)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2022-36384US	high7.3	0.18% (7th)	—	NUC kit wireless adapter 22.40	2022-11-11	< NUC kit wireless adapter 22.40
CVE-2022-36380US	high7.3	0.18% (7th)	—	NUC kit wireless adapter 22.40	2022-11-11	< NUC kit wireless adapter 22.40
CVE-2025-21094US	—	0.17% (6th)	—	no fix	2025-05-13	2 versions
CVE-2025-24308US	—	0.17% (6th)	—	no fix	2025-05-13	2 versions
CVE-2025-20034US	—	0.17% (6th)	—	no fix	2025-05-13	2 versions
CVE-2025-20009US	—	0.17% (6th)	—	no fix	2025-05-13	2 versions
CVE-2023-28396US	—	0.17% (6th)	—	<JHL8440 Thunderbolt 4 Controller Firmware Version 41	2024-02-14	< <JHL8440 Thunderbolt 4 Controller Firmware Version 41
CVE-2024-21829US	—	0.16% (5th)	—	no fix	2024-09-16	2 versions
CVE-2025-21100US	—	0.16% (5th)	—	no fix	2025-05-13	2 versions
CVE-2024-41167US	medium6.7	0.15% (4th)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2024-39811US	—	0.15% (4th)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2024-39285US	—	0.15% (4th)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2022-36377US	high7.8OT elevated	0.15% (4th)	—	NUC kit wireless adapter 22.40	2022-11-11	< NUC kit wireless adapter 22.40
CVE-2022-26024US	high7.8	0.14% (4th)	—	NUC HDMI firmware update tool 1.78.2.0.7	2022-11-11	< NUC HDMI firmware update tool 1.78.2.0.7
CVE-2024-27457US	—	0.14% (4th)	—	no fix	2024-10-08	≤ TDX Module <1.5.06
CVE-2024-40885US	—	0.14% (3rd)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2025-24918US	—	0.14% (3rd)	—	no fix	2025-11-11	≤ Server Configuration Utility <16.0.12
CVE-2024-39609US	medium6.7	0.14% (3rd)	—	no fix	2024-11-13	≤ Server Board M70KLP Family <v01.04.0030
CVE-2025-20082US	—	0.12% (2nd)	—	no fix	2025-05-13	2 versions
CVE-2025-35969US	—	0.09% (0th)	—	no fix	2026-05-12	≤ Update Utility Software <16.0.12

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation10 CVEs
CWE-284Improper Access Control3 CVEs
CWE-427Uncontrolled Search Path Element2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-277Insecure Inherited Permissions1 CVEs
CWE-281Improper Preservation of Permissions1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan