Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software

Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...

CVE-2022-26872

creationtimestamp| type| source ---|---|--- 2023-01-30 18:36:10+00:00| seen| https://t.me/cibsecurity/57163 2023-02-01 13:41:32+00:00| seen| https://t.me/truesecator/4011 2023-07-21 15:30:05+00:00| seen| https://t.me/truesecator/4644 2025-03-19 10:01:34+00:00| seen| https://t.me/itsecnews/5534...

CVE-2022-26872

AMI Megarac Password reset interception via API...

CVE-2022-26872

AMI Megarac Password reset interception via API...

CVE-2022-26872

CVE-2022-26872 (AMI MegaRAC BMC): password reset interception via API could enable an attacker to alter passwords through social engineering and, if exploited, enable remote control of affected servers and deployment of malware or firmware implants. Public discussions summarize the vulnerability ...

CVE-2022-26872 Password reset interception via API

AMI Megarac Password reset interception via API...

CVE-2022-26872 Password reset interception via API

AMI Megarac Password reset interception via API...

Tychon is vulnerable to privilege escalation due to OPENSSLDIR location

Overview Tychon contains a privilege escalation vulnerability due to the use of an OPENSSLDIR variable that specifies a location where an unprivileged Windows user may be able to place files. Description Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory...

CVE-2021-26872

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-26872

CVE-2021-26872 is described as a Windows Event Tracing Elevation of Privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 7.8 (Local, Low attack complexity, Privileges required: Low, No user interaction) with high impact on confidentiality, integrity, and availability. Connect...

CVE-2021-26872 Windows Event Tracing Elevation of Privilege Vulnerability

...

KB5000822: Windows 10 Version 1809 and Windows Server 2019 March 2021 Security Update

The remote Windows host is missing security update 5000822. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24095, CVE-2021-26860, CVE-2021-26862,...

KB5000807: Windows 10 March 2021 Security Update

The remote Windows host is missing security update 5000807. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-26862, CVE-2021-26866, CVE-2021-26868, CVE-2021-26871,...

KB5000808: Windows 10 Version 1909 March 2021 Security Update

The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...

KB5000853: Windows 8.1 and Windows Server 2012 R2 March 2021 Security Update

The remote Windows host is missing security update 5000853 or cumulative update 5000848. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB5000809: Windows 10 Version 1803 March 2021 Security Update

The remote Windows host is missing security update 5000809. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24107, CVE-2021-26869, CVE-2021-26884 - An memory...