6392 matches found
HPESBHF04377 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processor BIOS, INTEL-SA-00610, 2022.3 IPU – Intel Chipset Firmware Advisory, Multiple Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege; Remote: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML30 Gen10 Plus server - Prior to SPSE306.00.03.204.0, CSME 15.0.42 HPE ProLiant DL...
PT-2022-5394 · Intel · Intel Nuc
Name of the Vulnerable Software and Affected Versions: IntelR NUCs versions prior to INWHL357.0046 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. It is also associated...
HPESBHF04379 rev.2 - Certain HPE ProLiant Moonshot Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge -Prior to 1.9610-13-2022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21198 |...
2022.3 IPU – BIOS Advisory
Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-26006 Description: Improper input validation in th...
HPESBHF04380 rev.3 - Certain HPE ProLiant BL/DL/ML Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6410-20-2022 HPE ProLiant MicroServer Gen10 Plus v2 - Prior to 1.6410-20-2022 HPE ProLiant ML30 Gen10 Plus server - Prior to...
Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US
No description provided...
PT-2022-6356 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an improper input validation vulnerability in prior Dell BIOS versions. A local authenticated malicious user may potentially exploit this vulnerability by using an...
PT-2022-6350 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a stack-based buffer overflow in Dell BIOS. A local authenticated malicious user may exploit this by sending larger than expected input to a parameter using an SMI...
HP PC BIOS October 2022 PCR Measurement Update
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. Intel has released updates to mitigate the potential vulnerabilities. HP has identified...
3rd Generation Intel® Xeon® Scalable Processors Advisory
Summary: A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33117 Description: Improper access control for...
Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08764)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which could be exploited by a locally authenticated attacker to obtain arbitrary code execution in SMRAM using SMI...
Unspecified Vulnerability in Dell BIOS
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A security vulnerability exists in Dell BIOS, which can be exploited by an attacker to execute arbitrary code in SMRAM through the use of SMI...
Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08763)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by a locally authenticated attacker with administrative privileges to modify UEFI variables...
Dell BIOS Buffer Overflow Vulnerability (CNVD-2023-08761)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. A buffer overflow vulnerability exists in Dell BIOS, which can be exploited by a local, authenticated attacker to obtain arbitrary code execution in SMRAM using SMI...
Dell BIOS Buffer Overflow Vulnerability (CNVD-2023-08760)
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell, U.S.A. A buffer overflow vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to cause arbitrary writes during SMM by manipulating the SMI...
Dell BIOS Buffer Overflow Vulnerability
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A buffer overflow vulnerability exists in Dell BIOS, which can be exploited by an authenticated, local attacker to execute intentional code in SMRAM using SMI...
Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08762)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which could be exploited by a locally authenticated attacker to obtain arbitrary code execution in SMRAM using SMI...
Vulnerabilities fixed in Dell BIOS
Vulnerabilities have been fixed in the BIOS of Dell products. The vulnerabilities allow a malicious person to execute arbitrary execute arbitrary code under administrator privileges and manipulate data manipulate data. To exploit the vulnerabilities, an authenticated malicious party must have...
Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08765)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to obtain arbitrary code execution in SMRAM by using SMI...
CVE-2022-34390
Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...