Intel BIOS Firmware CVE-2022-21198 (INTEL-SA-00688)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00688 advisory. - Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via...

Intel BIOS Firmware CVE-2022-26006 (INTEL-SA-00688)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00688 advisory. - Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-31031

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2023-31034

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that originates from incorrect input validation of the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that originates from incorrect input validation of the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

PT-2024-1193 · Intel · Intel Nuc 8 Compute Element

Name of the Vulnerable Software and Affected Versions: Intel NUC 8 Compute Element BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via...

PT-2024-1330

Name of the Vulnerable Software and Affected Versions Intel NUC BIOS firmware versions prior to QN0073 Description The issue is related to improper input validation in the Intel NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Th...

PT-2024-1334

Name of the Vulnerable Software and Affected Versions Intel NUC BIOS firmware versions prior to IN0048 Description The issue is related to improper buffer restrictions in the Intel NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-1332 · Intel · Intel Nuc Bios

Name of the Vulnerable Software and Affected Versions: Intel NUC BIOS firmware versions prior to JY0070 Description: The issue is related to insufficient input validation, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: For versio...

Intel® NUC BIOS Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28738 Description: Improper input validation for some Intel® NUC...

Intel® NUC Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-42429 Description:...

PT-2024-1333 · Intel · Intel Nuc Bios

Name of the Vulnerable Software and Affected Versions: Intel NUC BIOS firmware versions prior to IN0048 Description: The issue is related to improper input validation in the Intel NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

HPESBHF04587 rev.1 - HPE ProLiant RL300 Gen11 Servers Using Ampere BIOS, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Unauthenticated Disclosure of Information; Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant RL300 Gen11 - Prior to v1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- ...

Dell Client BIOS Improper Authentication (DSA-2023-342)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by a improper input validation vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to corrupt memory on the system. Note that Nessus has no...

CVE-2023-43088

Dell Client BIOS contains a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...

CVE-2023-43088

Dell Client BIOS contains a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...

CVE-2023-39251

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system...

Design/Logic Flaw

Dell Client BIOS contains a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...