PT-2023-29197 · Dell · Dell Poweredge +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS version 1.4.4 Description: The issue concerns active debug code security vulnerability in the BIOS. An unauthenticated physical attacker could potentially exploit this, leadin...

Dell PowerEdge Server BIOS Security Vulnerability

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. A security vulnerability exists in Dell PowerEdge Server BIOS, Dell Precision BIOS version 1.4.4. An attacker could exploit the vulnerability to cause information disclosure, information tampering, code execution,...

PT-2023-8203 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to a vulnerability in the BIOS of AMI AptioV, specifically in the handling of BMP Logo files. This vulnerability allows a user with local access to upload a BMP Logo...

PT-2023-8204 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to the BMP Logo Handler component in the AMI AptioV BIOS setup utility, which allows for an unrestricted upload of dangerous file types, including PNG logo files. Th...

CVE-2023-29061

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

CVE-2023-29061

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

Authentication flaw

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

CVE-2023-29061 Lack of Adequate BIOS Authentication

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

CVE-2023-29061

BD FACSChorus is affected by CVE-2023-29061 due to missing BIOS password on the workstation. In BD FACSChorus v5.0, v5.1, v3.0, and v3.1, a threat actor with physical access can access BIOS settings and modify boot order and pre-boot authentication. CVSS v3.1 base score 5.2 (AV:P, AC:L, PR:N, UI:...

CVE-2023-29061 Lack of Adequate BIOS Authentication

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

HPESBHF04540 rev.1 - Certain HPE Cray Servers and HPE ProLiant DL/XL Servers Using AMD EPYC Processors, AMD-SB-4007, DXE Driver Memory Leaks, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235n Server - Prior to BIOS 1.3.0 HFP 23.4 HPE Cray EX425 Compute Blade - Prior to BIOS 1.7.2 HFP 23.9 HPE ProLiant DL325 Gen10 Plus server - Prior to...

BD FACSChorus Security Breach

The BD FACSChorus is a multichannel flow cytometry system from BD Medical BD. A security vulnerability exists in the BD FACSChorus that stems from the absence of a BIOS password on the workstation...

HPESBHF04560 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380 Gen10 G - Prior to HPE OmniSta...

HPESBCR04545 rev.2 - Certain HPE Cray Servers, and HPE ProLiant DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7005: Return Address Predictor (INCEPTION) Security Notice, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235n Server - Prior to BIOS 1.3.1 HFP 23.9 HPE Cray EX425 Compute Blade - Prior to BIOS 1.7.2 HFP 23.9 HPE ProLiant DL325 Gen10 Plus server - Prior to BIOS 2.80 H...

Dell Command Monitor Elevation of Privilege Vulnerability

The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...

Bread - BIOS Reverse Engineering And Advanced Debugging

BREAD BIOS Reverse Engineering & Advanced Debugging is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast majority -- ...

CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

Input validation

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

CVE-2023-32469

Dell Precision Tower BIOS has an Improper Input Validation vulnerability. A locally authenticated user with admin privileges could exploit it to execute arbitrary code. Affected: Dell Precision Tower BIOS (Precison Tower series). Root cause: input validation weakness in BIOS component. Impact: po...