Known vulnerabilities in Virtual RAID on CPU (VROC)

Known vulnerabilities in Virtual RAID on CPU (VROC)

Vendor: Intel

Software: Virtual RAID on CPU (VROC)

Software CPE: cpe:2.3:h:intel:virtual_raid_on_cpu_vroc:*:*:*:*:*:*:*:*

Website: https://www.intel.com

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU100478 - Improper input validation CVE-2024-32485	CWE-20	Low	No	No	8.6.0.3001	14.11.2024	SB2024111421 SB2025010966 SB2025051534
#VU100473 - Insufficient Control Flow Management CVE-2024-29079	CWE-691	Low	No	No	8.6.0.3001	14.11.2024	SB2024111421 SB2025010966 SB2025051534
#VU96054 - Untrusted Search Path CVE-2024-23489	CWE-426	Low	No	No	8.6.0.1191	15.08.2024	SB2024081551 SB2025011718
#VU86867 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-35003	CWE-22	Low	No	No	8.0.8.1001	28.02.2024	SB2024022815
#VU86866 - Incorrect Default Permissions CVE-2023-34315	CWE-276	Low	No	No	8.0.8.1001	28.02.2024	SB2024022815
#VU86865 - Untrusted Search Path CVE-2023-32646	CWE-426	Low	No	No	8.0.8.1001	28.02.2024	SB2024022815
#VU86864 - Improper Access Control CVE-2023-31271	CWE-284	Low	No	No	8.0.8.1001	28.02.2024	SB2024022815
#VU79402 - Improper Access Control CVE-2022-45112	CWE-284	Low	No	No	8.0.0.4035	11.08.2023	SB2023081118
#VU76038 - Improper input validation CVE-2022-25976	CWE-20	Low	No	No	7.7.6.1003	11.05.2023	SB2023051131 SB2023051148
#VU76036 - NULL Pointer Dereference CVE-2022-29508	CWE-476	Low	No	No	7.7.6.1003	11.05.2023	SB2023051131 SB2023051148
#VU76035 - Incorrect Default Permissions CVE-2022-30338	CWE-276	Low	No	No	7.7.6.1003	11.05.2023	SB2023051131 SB2023051148
#VU76034 - Use After Free CVE-2022-29919	CWE-416	Low	No	No	7.7.6.1003	11.05.2023	SB2023051131 SB2023051148