6611 matches found
Physical bypass of certain HP TamperLock features
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities. Desktop Workstation mitigation f...
HP Workstation BIOS Arbitrary Write Security Update
A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability. HP has released updates to mitigate the...
PT-2024-2748
Name of the Vulnerable Software and Affected Versions HP Workstation PCs affected versions not specified Description A potential security issue has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of...
HPESBHF04591 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7009: AMD Processor Vulnerabilities Security Notice, Local Arbitrary Code Execution
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL345 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL365 Gen11 Server - Prior to v1.5801042024 HPE...
HPESBHF04592 rev.1 - Certain HPE ProLiant Servers Using Certain AMD EPYC Processors, AMD-SB-3007: SEV Firmware Vulnerabilities, Multiple Vulnerabilities
Potential Security Impact: Local: Unauthorized Access to Data, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL345 Gen11 Server - Prior to v1.5801042024 HPE ProLiant DL365 Gen1...
The vulnerability of the optimization tool for automatic BIOS driver updates, Lenovo Vantage Service, is related to errors in the authentication process. This vulnerability allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the optimization tool for automatic BIOS driver updates in Lenovo Vantage Service is related to errors in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...
Dell Client BIOS DoS (DSA-2023-176)
The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by a denial of service vulnerability. Due to a signed to unsigned conversion error, a local attacker with administrator privileges can cause a denial of service condition on an affected device. Note that...
CVE-2023-28063
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...
Privilege escalation
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...
CVE-2023-28063
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...
CVE-2023-28063
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...
CVE-2023-28063
CVE-2023-28063 affects Dell BIOS. Root cause: a signed-to-unsigned conversion error. Local authenticated admin can exploit to cause a denial of service. Dell-DSA-2023-176 and Dell KB 000214780 document the fix; Nessus plugin notes a patch is available. If exploited, impact is DoS on the affected ...
CVE-2023-28063: Signed to Unsigned Conversion Error
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...
Dell BIOS Security Vulnerability
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS. Attackers have exploited the vulnerability to cause a denial of service on the system...
K000138452: Intel CPU BIOS vulnerabilities CVE-2023-25756 and CVE-2023-22329
Security Advisory Description CVE-2023-25756 Out-of-bounds read in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access. CVE-2023-22329 Improper input validation in the BIOS firmware for some IntelR Processo...
CVE-2023-42429
Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-42766
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-42429
Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...