HPESBCR04666 rev.1 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7009: AMD Processor Security Notice, Local Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade prior to BIOS 1.8.0 in HFP 24.3.1 HPE Cray EX235n Server prior to BIOS 1.3.1 in HFP 23.9 HPE Cray EX425 Compute Blade prior to BIOS 1.7.2 in...

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

CVE-2024-0158

CVE-2024-0158 relates to Dell BIOS, where an improper input validation flaw could let a locally authenticated administrator modify a UEFI variable, causing denial of service and privilege escalation. Affected software is the Dell BIOS (details on exact versions are not consistently specified acro...

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that originates from the inclusion of incorrect input validation. A locally authenticated attacker with administrator privileges could...

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

CVE-2022-27540

CVE-2022-27540 concerns a TOCTOU vulnerability in HP BIOS for certain HP PC products. The issue could allow arbitrary code execution, denial of service, and information disclosure. Mitigation is via HP BIOS updates; HP’s HP PC BIOS Additional Security Update documents affected platforms and minim...

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

PT-2024-11544 · Hewlett Packard · Hp Bios

Name of the Vulnerable Software and Affected Versions: HP BIOS affected versions not specified Description: A potential Time-of-Check to Time-of-Use TOCTOU issue has been identified, which might allow arbitrary code execution, denial of service, and information disclosure. Recommendations: At the...

Certain HP PC BIOS Logo Vulnerabilities

Potential security vulnerabilities, known as LogoFAIL, have been reported in the AMI BIOS and the Insyde BIOS used in certain HP PC products, which might allow escalation of privilege, arbitrary code execution, denial of service, information disclosure, and/or data tampering. AMI and Insyde are...

The vulnerability of BIOS microprogramming software in HP laptops and workstations, related to the improper assignment of permissions for critical resources, allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of BIOS microprogramming software in HP laptops and workstations is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of BIOS microprogramming software in HP laptops and workstations, related to the improper assignment of permissions for critical resources, allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of BIOS microprogramming software in HP laptops and workstations is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Unspecified Vulnerability in Dell PowerEdge Server BIOS (CNVD-2024-29653)

Dell PowerEdge Server BIOS is a system update driver from Dell USA. A security vulnerability exists in the Dell PowerEdge Server BIOS, which originated when the server BIOS contained a TOCTOU Competitive Condition vulnerability that could be exploited by an attacker to gain access to unauthorized...

PT-2024-6025 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue is related to the use of default cryptographic keys in the Dell BIOS, which could allow a high-privileged attacker with local access to bypass Secure Boot and...

CVE-2024-0171

Dell PowerEdge Server BIOS contains a TOCTOU race condition that could allow a local, low-privilege attacker to access restricted resources. Affected component is the BIOS on Dell PowerEdge servers; root cause is a TOCTOU concurrency issue. The vulnerability is rated locally exploitable with high...

CVE-2024-0171

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...