CVE-2022-38101: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-12951 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local...

PT-2023-13345 · Intel · Intel Nuc Pro Kit +6

Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kits affected versions not specified IntelR NUC Performance Kits affected versions not specified IntelR NUC Performance Mini PC affected versions not specified IntelR NUC 8 Compute Element affected versions not...

CVE-2022-34147: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUC 9 Extreme Laptop Kits, IntelR NUC Performance Kits, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, and IntelR NUC Compute Element may allow a privileged user to potentially enab...

CVE-2023-22312: Improper Access Control

Improper access control for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-33894: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

HPESBHF04476 rev.1 - Certain HPE Proliant DX Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to v2.8004-20-2023 HPE ProLiant DX190r Gen10 server - Prior to v2.8004-20-2023 HPE ProLiant DX360 Gen10 server - Prior to...

CVE-2023-25771: Improper Access Control

Improper access control for some IntelR NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-32766: Improper Input Validation

Improper input validation for some IntelR BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-46792

Time-of-check Time-of-use TOCTOU in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service...

CVE-2021-46792

Time-of-check Time-of-use TOCTOU in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service...

Multi-vendor BIOS Security Vulnerabilities (May 2023) - Lenovo Support US

No description provided...

Ransomware attack on MSI led to compromised Intel Boot Guard private keys

On April 7, 2023 MSI Micro-Star International released a statement confirming a cyberattack on part of its information systems. While the statement does not reveal a lot of tangible information, this snippet is important: "MSI urges users to obtain firmware/BIOS updates only from its official...

HPESBHF04461 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen9 Server - Prior to 3.1403-09-2023 HPE ProLiant ML30 Gen9 Server - Prior to 3.1403-09-2023 HPE ProLiant DL360 Gen10 Server -...

HPESBHF04470 rev.1 - Certain HPE Superdome Flex Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to 3.60.50 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-38087 |...

HPESBHF04462 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to v2.8004-20-2023 HPE StoreEasy 1660 Storage - Prior to v2.8004-20-2023 HPE StoreEasy 1660 Expanded Storage - Prior to v2.8004-20-2023 HP...

Intel 2023.2 IPU – BIOS May 2023 Security Update

Intel has informed HP of potential vulnerabilities identified in BIOS firmware for some Intel® Processors which might allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate t...

Intel® NUC BIOS Update Software Advisory

Summary: A potential security vulnerability in some Intel® NUC Chaco Canyon BIOS update software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38101 Description: Uncontrolled search path in...

Intel ® NUC BIOS Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC firmware may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-36339 Description: Improp...

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

The threat actors behind the ransomware attack on Taiwanese PC maker MSI last month have leaked the company's private code signing keys on their dark website. "Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem," Alex Matrosov, founder and CEO of firmware security...