Lucene search

K

Box Firmware Security Vulnerabilities

cve
cve

CVE-2023-39171

SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin...

7.2CVSS

6.9AI Score

0.001EPSS

2023-12-07 03:15 PM
9
cve
cve

CVE-2023-39169

The affected devices use publicly available default credentials with administrative...

9.8CVSS

9.4AI Score

0.001EPSS

2023-12-07 03:15 PM
13
cve
cve

CVE-2023-39167

In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive...

7.5CVSS

7.5AI Score

0.002EPSS

2023-12-07 02:15 PM
7
cve
cve

CVE-2023-39172

The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network...

9.1CVSS

8.9AI Score

0.001EPSS

2023-12-07 02:15 PM
4
cve
cve

CVE-2023-43776

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file...

6.8CVSS

6.5AI Score

0.001EPSS

2023-10-17 01:15 PM
22
cve
cve

CVE-2023-28075

Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI in order to gain arbitrary code execution on the...

6.9CVSS

6.5AI Score

0.0004EPSS

2023-08-16 08:15 PM
35
cve
cve

CVE-2023-28027

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
21
cve
cve

CVE-2023-28034

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
27
cve
cve

CVE-2023-28044

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
17
cve
cve

CVE-2023-28036

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
19
cve
cve

CVE-2023-28060

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
24
cve
cve

CVE-2023-28031

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
20
cve
cve

CVE-2023-28026

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
19
cve
cve

CVE-2023-28050

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
22
cve
cve

CVE-2023-28058

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
21
cve
cve

CVE-2023-25938

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 11:15 AM
21
cve
cve

CVE-2023-28059

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
16
cve
cve

CVE-2023-28054

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
13
cve
cve

CVE-2023-28052

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
17
cve
cve

CVE-2023-28035

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
12
cve
cve

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
14
cve
cve

CVE-2023-28041

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
12
cve
cve

CVE-2023-28061

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
10
cve
cve

CVE-2023-28040

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
11
cve
cve

CVE-2023-28056

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
12
cve
cve

CVE-2023-28042

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
13
cve
cve

CVE-2023-28028

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
11
cve
cve

CVE-2023-28030

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
11
cve
cve

CVE-2023-25937

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
19
cve
cve

CVE-2023-28029

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
16
cve
cve

CVE-2023-28032

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
11
cve
cve

CVE-2023-28033

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 10:15 AM
13
cve
cve

CVE-2023-25936

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI...

6.7CVSS

6.2AI Score

0.0004EPSS

2023-06-23 09:15 AM
11
cve
cve

CVE-2023-24571

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with administrator privileges could potentially exploit this vulnerability to perform arbitrary code...

7.5CVSS

6.5AI Score

0.0004EPSS

2023-03-16 10:15 AM
25
cve
cve

CVE-2022-24410

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug...

6.8CVSS

4.2AI Score

0.001EPSS

2023-02-10 11:15 AM
18
cve
cve

CVE-2022-34398

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the...

7.5CVSS

7.1AI Score

0.0004EPSS

2023-02-01 06:15 AM
38
cve
cve

CVE-2022-32490

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-01-18 06:15 AM
16
cve
cve

CVE-2022-32489

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
28
4
cve
cve

CVE-2022-32485

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
25
4
cve
cve

CVE-2022-32484

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI...

5.6CVSS

4.5AI Score

0.0004EPSS

2022-10-12 08:15 PM
20
4
cve
cve

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

8.2CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
21
4
cve
cve

CVE-2022-32487

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.8AI Score

0.0004EPSS

2022-10-12 08:15 PM
22
4
cve
cve

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during...

7.8CVSS

7.4AI Score

0.0004EPSS

2022-10-12 08:15 PM
20
4
cve
cve

CVE-2022-32493

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

7.8CVSS

7.9AI Score

0.0004EPSS

2022-10-12 08:15 PM
24
4
cve
cve

CVE-2022-32483

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI...

5.6CVSS

4.5AI Score

0.0004EPSS

2022-10-12 08:15 PM
30
4
cve
cve

CVE-2012-6428

Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to...

7.1AI Score

0.006EPSS

2022-10-03 04:15 PM
23
cve
cve

CVE-2012-6427

Multiple SQL injection vulnerabilities in Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a similar issue to...

8.8AI Score

0.004EPSS

2022-10-03 04:15 PM
28
cve
cve

CVE-2022-26859

Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during...

7CVSS

6.6AI Score

0.0004EPSS

2022-09-06 09:15 PM
21
4
cve
cve

CVE-2022-26860

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in...

7.8CVSS

7.9AI Score

0.001EPSS

2022-09-06 09:15 PM
22
3
cve
cve

CVE-2022-26861

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during...

7.9CVSS

7.6AI Score

0.0004EPSS

2022-09-06 09:15 PM
26
2
Total number of security vulnerabilities104