CVE-2023-29061

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

Authentication flaw

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

CVE-2023-29061 Lack of Adequate BIOS Authentication

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

CVE-2023-29061

BD FACSChorus is affected by CVE-2023-29061 due to missing BIOS password on the workstation. In BD FACSChorus v5.0, v5.1, v3.0, and v3.1, a threat actor with physical access can access BIOS settings and modify boot order and pre-boot authentication. CVSS v3.1 base score 5.2 (AV:P, AC:L, PR:N, UI:...

CVE-2023-29061 Lack of Adequate BIOS Authentication

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

BD FACSChorus Security Breach

The BD FACSChorus is a multichannel flow cytometry system from BD Medical BD. A security vulnerability exists in the BD FACSChorus that stems from the absence of a BIOS password on the workstation...

PT-2023-22118

Name of the Vulnerable Software and Affected Versions FACSChorus workstation affected versions not specified Description The issue concerns the lack of a BIOS password on the FACSChorus workstation. This allows a threat actor with physical access to potentially exploit the issue and access the BI...

CVE-2023-29061: Missing Authentication for Critical Function

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication...

HPESBHF04540 rev.1 - Certain HPE Cray Servers and HPE ProLiant DL/XL Servers Using AMD EPYC Processors, AMD-SB-4007, DXE Driver Memory Leaks, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235n Server - Prior to BIOS 1.3.0 HFP 23.4 HPE Cray EX425 Compute Blade - Prior to BIOS 1.7.2 HFP 23.9 HPE ProLiant DL325 Gen10 Plus server - Prior to...

HPESBHF04560 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380 Gen10 G - Prior to HPE OmniSta...

HPESBCR04545 rev.2 - Certain HPE Cray Servers, and HPE ProLiant DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7005: Return Address Predictor (INCEPTION) Security Notice, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235n Server - Prior to BIOS 1.3.1 HFP 23.9 HPE Cray EX425 Compute Blade - Prior to BIOS 1.7.2 HFP 23.9 HPE ProLiant DL325 Gen10 Plus server - Prior to BIOS 2.80 H...

Dell Command Monitor Elevation of Privilege Vulnerability

The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...

HPESBHF04554 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7810-31-2023 HPE Edgeline e920 Server Blade - Prior to 1.7810-31-2023 HPE Edgeline e920d Server Blade - Prior to 1.7810-31-2023...

HPESBHF04568 rev.1 - Certain HPE ProLiant DL/DX/XL servers Using Certain AMD EPYC Processors. AMD-SB-3005: AMD INVD Instruction Security Notice, Memory Integrity Vulnerability

Potential Security Impact: Local: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to 2.9010-27-2023 HPE ProLiant DL385 Gen10 Plus server - Prior to 2.9010-27-2023 HPE ProLiant DL325 Gen10 Plus v2 server - Prior to...

Bread - BIOS Reverse Engineering And Advanced Debugging

BREAD BIOS Reverse Engineering & Advanced Debugging is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast majority -- ...

CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

Input validation

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

CVE-2023-32469

Dell Precision Tower BIOS has an Improper Input Validation vulnerability. A locally authenticated user with admin privileges could exploit it to execute arbitrary code. Affected: Dell Precision Tower BIOS (Precison Tower series). Root cause: input validation weakness in BIOS component. Impact: po...

CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

Dell Precision Tower BIOS Input Validation Error Vulnerability

Dell Precision Tower BIOS is a series of computer workstations for CAD/Architecture/CG professionals or as a small business server from Dell USA. A security vulnerability exists in the Dell Precision Tower BIOS, which arises from a component that contains incorrect input validation, and which cou...