The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers allows a hacker to disclose protected information.

The vulnerability of Dell PowerEdge server BIOS microprogramming software relates to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2024-38303

Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

Dell Client Platform 安全漏洞

Dell Client Platform is a client platform from Dell USA. A security vulnerability exists in the Dell Client Platform BIOS that stems from the use of a default encryption key. An attacker could exploit the vulnerability to execute arbitrary code...

Dell Edge Gateway Buffer Overflow Vulnerability

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200 and 5200, whic...

The vulnerability of the DXE microprogramming software driver in Dell Edge Gateway BIOS allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the DXE microprogramming software driver in Dell Edge Gateway BIOS relates to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain elevated privileges...

Dell Edge Gateway Buffer Overflow Vulnerability (CNVD-2024-37423)

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200, 5200. The...

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-31393)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that originates from the inclusion of incorrect input validation. A locally authenticated attacker with administrator privileges could...

The vulnerability of BIOS microprogramming software in HP laptops and workstations, related to the improper assignment of permissions for critical resources, allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of BIOS microprogramming software in HP laptops and workstations is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Unspecified Vulnerability in Dell PowerEdge Server BIOS (CNVD-2024-29653)

Dell PowerEdge Server BIOS is a system update driver from Dell USA. A security vulnerability exists in the Dell PowerEdge Server BIOS, which originated when the server BIOS contained a TOCTOU Competitive Condition vulnerability that could be exploited by an attacker to gain access to unauthorized...

CVE-2024-0171

Dell PowerEdge Server BIOS contains a TOCTOU race condition that could allow a local, low-privilege attacker to access restricted resources. Affected component is the BIOS on Dell PowerEdge servers; root cause is a TOCTOU concurrency issue. The vulnerability is rated locally exploitable with high...

Dell Client Platform Authorization Issues Vulnerability

Dell Client platforms are a client platform from Dell USA. The Dell Client Platform suffers from an authorization issue vulnerability that stems from the presence of incorrect authorization, which can be exploited by an attacker to bypass BIOS authorization and modify settings in the BIOS...

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-29341)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS suffers from an input validation error vulnerability that stems from improper input validation in an externally-developed component, which could be exploited by an attacker to cause...

Dell BIOS Buffer Overflow Vulnerability (CNVD-2024-29342)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. Dell BIOS suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A local, authenticated attacker with administrator...

CVE-2024-32858

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Unspecified Vulnerability in Dell BIOS (CNVD-2024-28192)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A security vulnerability exists in Dell BIOS, which stems from a lack of integrity checking support, and could be exploited by an attacker with physical access to the system to bypass security...

HP PC Security Vulnerability

HP PC is a computer product of Hewlett-Packard HP, an American company. A security vulnerability exists in the HP PC BIOS that stems from allowing elevated privileges and code execution...

CVE-2023-52710

Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26, As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of...

CVE-2021-47370

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure tx skbs always have the MPTCP ext Due to signed/unsigned comparison, the expression: info-sizegoal - skb-len 0 evaluates to true when the size goal is smaller than the skb size. That results in lack of tx cache...

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-24728)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that originates from the inclusion of incorrect input validation, which can be exploited by a locally authenticated attacker to cause...

The vulnerability of UEFI (BIOS) microprogramming software in Huawei personal computers allows a hacker to execute arbitrary code.

The vulnerability of UEFI BIOS in Huawei personal computers is related to the execution of operations outside the buffer in SMRAM. Exploiting this vulnerability allows an attacker to execute arbitrary code in System Management Mode SMM...