CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

Authorization

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

Hardcoded credentials

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

CVE-2020-5363

Dell CVE-2020-5363 affects select Dell Client Client Consumer and Commercial platforms, where the BIOS Admin password can be changed through Dell’s manageability interface without the current password. This could allow an attacker with physical access or OS administrator privileges to gain privil...

CVE-2020-5363

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

CVE-2020-5362

CVE-2020-5362 affects Dell Client Client Consumer and Commercial platforms, where an improper authorization in the Dell Manageability interface allows an attacker with local OS administrator privileges to bypass BIOS Administrator authentication and restore BIOS Setup to default values. The NVD e...

Critical Intel Flaws Fixed in Active Management Technology

Intel has released its June security updates, which address two critical vulnerabilities that, if exploited, can give unauthenticated attackers elevated privileges. The critical flaws exist in Intel’s Active Management Technology AMT, which is used for remote out-of-band management of personal...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Privilege escalation

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Design/Logic Flaw

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8334

CVE-2020-8334 concerns Lenovo ThinkPad BIOS tamper-detection not triggering on ThinkPad T495s, X395, T495, A485, A285, A475, A275, potentially enabling unauthorized access. The core issue, per NVD/NVD-affiliated records, is a failure in the BIOS tamper-detection mechanism (root cause not elaborat...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8320

CVE-2020-8320 concerns an internal shell embedded in BIOS images for some ThinkPad models, enabling privilege escalation. The vulnerability arises in the BIOS firmware chain and affects ThinkPad-related BIOS images; root cause is an internal shell included in the BIOS image. Public sources (NVD, ...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

2020.1 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in BIOS firmware for some Intel® Processors may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0528 Description: Improper...

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...