CVE-2022-26861: Insecure Automated Optimizations

Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM...

CVE-2022-26859: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM...

Dell BIOS 缓冲区错误漏洞

Dell BIOS is embedded software on a small memory chip SMM on a computer motherboard from Dell, Inc. A security vulnerability exists in Dell BIOS, which stems from the inclusion of a stack-based buffer overflow vulnerability that can be exploited by a local attacker by sending malicious input via...

PT-2022-18110 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability. A local attacker could exploit this by sending malicious input via SMI to bypass security checks, resulting in arbitrary code...

CVE-2022-26860: Stack-based Buffer Overflow

Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM...

PT-2022-18111 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Insecure Automated Optimization vulnerability in Dell BIOS. A local authenticated malicious user could exploit this vulnerability by sending malicious input via...

CVE-2022-26858: Improper Authentication

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...

The vulnerability of the SBIOS component in NVIDIA’s DGX A100 server allows a hacker to execute arbitrary code, cause system failures, or compromise the confidentiality of protected information.

The vulnerability of the SBIOS component in NVIDIA’s Ofbd server NVIDIA DGX A100 is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code, cause service failures, or compromise the confidentiality of protected...

HPESBHF04354 rev.1 - Certain HPE ProLiant Apollo, XL Servers Using Certain Intel Processor BIOS, INTEL-SA-00686, 2022.2 IPU – Intel BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE ProLiant XL290n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE Apollo 2000 Gen10 Plus System - Prior to...

HPESBHF04344 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00657, 2022.2 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE ProLiant XL290n Gen10 Plus Server - Prior to 1.6408-11-2022 HPE Apollo 2000 Gen10 Plus System - Prior to...

The vulnerability of the SBIOS component in NVIDIA’s DGX A100 IpSecDxe server allows a attacker to execute arbitrary code, cause service failures, or compromise the integrity of the protected information.

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s IpSecDxe stack arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or compromise the integrity of the protected information...

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmbiosPei architecture allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s SmbiosPei firmware is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

HPESBHF04358 rev.1 - HPE Superdome Flex 280 Servers Using Certain Intel Processor BIOS, INTEL-SA-00686, 2022.2 IPU – Intel BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior 1.35.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-33060 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A...

The vulnerability of the System Management Mode (SMM) implementation in HP notebook BIOS microprogramming systems allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the System Management Mode SMM implementation in HP notebook BIOS microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

CVE-2021-33060

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33060

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33060

CVE-2021-33060 is an Intel BIOS/IPU vulnerability causing an out-of-bounds write in BIOS firmware that could let an authenticated local user escalate privileges. The Intel advisory (INTEL-SA-00686) lists affected products as certain 3rd Gen Intel Xeon Scalable Processors and Intel IPU BIOS, with ...

CVE-2021-33060

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33060: Out-of-bounds Write

Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...