Lucene search
+L

623 matches found

CNVD
CNVD
added 2024/04/15 12:00 a.m.14 views

Dell BIOS Buffer Overflow Vulnerability (CNVD-2024-20277)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. Dell BIOS suffers from a buffer overflow vulnerability that stems from the inclusion of an out-of-bounds write vulnerability that can be exploited by a local attacker with administrator privilege...

4.7CVSS7.1AI score0.00176EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/08 12:00 a.m.14 views

The vulnerability of the microprogramming-based BIOS software on Server Board S1200RP, S1400FP, S1400SP, S1600JP, S2400BB, S2400EP, S2400SC, S2600CO, S2600CP, S2600GL, S2600GZ, S2600IP, W2600CR, S2600JF, S2600WP, S4600LH, S4600LT, S2600CW, S2600KP, S2600TP, and S2600WT boards is related to access control deficiencies, which allow attackers to increase their privileges.

The vulnerability of the microprogramming-based BIOS software on Server Board S1200RP, S1400FP, S1400SP, S1600JP, S2400BB, S2400EP, S2400SC, S2600CO, S2600CP, S2600GL, S2600GZ, S2600IP, W2600CR, S2600JF, S2600WP, S4600LH, S4600LT, S2600CW, S2600KP, S2600TP, and S1200BT is related to access contro...

6.7CVSS6.6AI score0.00174EPSS
SaveExploits0References3Affected Software64
Vulnrichment
Vulnrichment
added 2024/04/05 8:46 p.m.25 views

CVE-2023-25494

A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...

6.7CVSS6.7AI score0.00179EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/05 12:00 a.m.16 views

Lenovo ThinkStation 安全漏洞

Lenovo Desktops and Lenovo ThinkStation are both products of the Chinese company Lenovo.Lenovo Desktops are desktop computers.Lenovo ThinkStation are desktop workstations. A security vulnerability exists in the BIOS of Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation, which stems from a...

6.7CVSS7AI score0.00182EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/25 12:00 a.m.13 views

The vulnerability of Dell PowerEdge server BIOS microprogramming software, related to the possibility of buffer overflows, allows attackers to compromise its integrity and accessibility.

The vulnerability of Dell PowerEdge server BIOS microprogramming software is related to the possibility of buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the integrity and availability of the system...

7.2CVSS5.8AI score0.00187EPSS
SaveExploits0References2Affected Software24
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.10 views

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

5.3CVSS6AI score0.00151EPSS
SaveExploits0References2Affected Software58
Cvelist
Cvelist
added 2024/03/19 7:52 a.m.34 views

CVE-2024-25942

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

4.4CVSS4.9AI score0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/19 7:42 a.m.12 views

CVE-2024-22453

Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulnerability to write to otherwise unauthorized memory...

7.2CVSS6.9AI score0.00187EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/15 12:00 a.m.17 views

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A buffer overflow vulnerability...

8.8CVSS7.1AI score0.00151EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:00 a.m.11 views

The vulnerability of the microprogramming software in the BIOS of Dell PowerEdge servers and Dell Precision Rack workstations allows a intruder to gain unauthorized access to protected information.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

3.8CVSS5.7AI score0.00169EPSS
SaveExploits0References2Affected Software123
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:00 a.m.13 views

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers and Dell Precision Rack workstations allows a hacker to write arbitrary data into the SMRAM (System Management RAM) area.

The vulnerability of the BIOS software of Dell PowerEdge servers and Dell Precision Rack workstations is related to chips during the checking of the SMM connection buffer. Exploiting this vulnerability allows an attacker to write arbitrary data into the SMRAM System Management RAM area...

7.2CVSS7.2AI score0.00204EPSS
SaveExploits0References2Affected Software83
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:00 a.m.13 views

The vulnerability of the microprogramming software in the BIOS of Dell PowerEdge servers and Dell Precision Rack workstations allows a intruder to gain unauthorized access to protected information.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

3.8CVSS5.7AI score0.00203EPSS
SaveExploits0References2Affected Software123
Prion
Prion
added 2024/02/14 11:15 p.m.16 views

Information disclosure

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability...

8.3AI score0.00193EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/06 12:00 a.m.14 views

Dell BIOS Security Vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS. Attackers have exploited the vulnerability to cause a denial of service on the system...

6.7CVSS6.6AI score0.00158EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/19 8:03 p.m.9 views

CVE-2023-29495

Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access...

7.5CVSS7.2AI score0.00161EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.13 views

The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to gain access to read, modify, or delete data. This can enable the hacker to increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the SBIOS system’s NVIDIA DGX A100 server stems from the transition to System Management Mode SMM due to an SMI interrupt. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete data access rights, enhance their privileges, execute arbitrary code,...

7.5CVSS7.5AI score0.00176EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/01/12 7:15 p.m.14 views

CVE-2023-31031

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

7.8CVSS6.1AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/12 7:15 p.m.9 views

CVE-2023-31034

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

7.8CVSS5.8AI score0.00151EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/06 4:15 p.m.6 views

CVE-2023-39538

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

7.8CVSS5.7AI score0.00224EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/06 4:15 p.m.26 views

CVE-2023-39538

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

7.8CVSS0.00224EPSS
SaveExploits0References2
Rows per page
Query Builder