CVE-2023-29495

Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28738

Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28738

Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28743

Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28743

CVE-2023-28743 concerns Intel® NUC BIOS firmware. The connected Intel advisory/Red Hat/NVD entries confirm the flaw is caused by improper input validation in some NUC BIOS firmware prior to version QN0073, which could allow a locally privileged user to escalate privileges. Affected software: Inte...

CVE-2023-28738

CVE-2023-28738 affects Intel® NUC BIOS firmware prior to version JY0070. The root cause is improper input validation in the BIOS firmware, enabling a privileged user with local access to potentially escalate privileges. Affected scope is Intel NUC BIOS firmware before JY0070; CVSS metrics in publ...

CVE-2023-38587

Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-38587

The CVE-2023-38587 issue affects Intel NUC BIOS firmware where improper input validation in the BIOS may allow a locally authenticated user to escalate privileges. Affected component is the BIOS firmware on Intel NUC systems; root cause is input validation weaknesses that can be exploited with lo...

CVE-2023-42766

Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42766

Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-38587

Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42766

CVE-2023-42766 affects Intel NUC 8 Compute Element BIOS firmware. The issue stems from improper input validation in the BIOS, potentially allowing a privileged user to escalate privileges via local access. Documented impact is local escalation with high severity (CVSS v3.1 base 7.5–7.8 depending ...

CVE-2023-42429

CVE-2023-42429 affects Intel NUC BIOS firmware. The issue is described as improper buffer restrictions in the BIOS, which may let a local, privileged attacker escalate privileges. The Intel advisory (INTEL-SA-01028) confirms the vulnerability and lists mitigation as firmware updates across affect...

CVE-2023-42429

Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42429

Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to gain access to read, modify, or delete data. This can enable the hacker to increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the SBIOS system’s NVIDIA DGX A100 server stems from the transition to System Management Mode SMM due to an SMI interrupt. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete data access rights, enhance their privileges, execute arbitrary code,...

Intel BIOS Firmware CVE-2022-26006 (INTEL-SA-00688)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00688 advisory. - Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Intel BIOS Firmware CVE-2022-21198 (INTEL-SA-00688)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00688 advisory. - Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via...

CVE-2023-31031

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2023-31034

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...