PT-2023-13380 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM...

CVE-2022-40134

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40134

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2021-3439

The CVE-2021-3439 entry concerns a vulnerability in BIOS firmware of some HP Workstation products. Public sources indicate a potential flaw in the BIOS firmware that HP is mitigating with firmware updates. The NVD entry assigns a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW at...

CVE-2021-3439

HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities...

CVE-2021-3439

HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities...

CVE-2022-27537

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities...

CVE-2022-27537

CVE-2022-27537 concerns HP PC BIOS vulnerabilities that could enable arbitrary code execution, privilege escalation, denial of service, and information disclosure. Connected sources indicate the issue affects HP system BIOS with mitigations in BIOS updates; HP documents list affected platforms an...

CVE-2022-27537

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities...

CVE-2022-40134

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40134

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40134

CVE-2022-40134 concerns a vulnerability in the SMI Set BIOS Password SMI Handler on certain Lenovo models. The issue permits a locally privileged attacker to read SMM memory, causing potential information disclosure. Documented impact is an information leak with HIGH confidentiality impact and LO...

CVE-2021-3809

Potential security vulnerabilities have been identified in the BIOS UEFI Firmware for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities...

CVE-2021-3809

Potential security vulnerabilities have been identified in the BIOS UEFI Firmware for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities...

CVE-2021-3809

CVE-2021-3809 concerns potential security vulnerabilities in the BIOS/UEFI firmware of certain HP PC products that might allow arbitrary code execution. The available connected documents note HP is releasing firmware updates to mitigate these vulnerabilities, with HP’s May 2022 security update (H...

CVE-2021-3808

Potential security vulnerabilities have been identified in the BIOS UEFI Firmware for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities...

CVE-2021-3808

Potential security vulnerabilities have been identified in the BIOS UEFI Firmware for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities...

CVE-2021-3808

The CVE-2021-3808 entry concerns potential security vulnerabilities in the BIOS (UEFI firmware) of HP PC products, which could allow arbitrary code execution. The connected sources indicate the issue resides in HP’s BIOS/UEFI firmware and that HP released firmware updates (HPSBHF03788 and related...

CVE-2022-27538

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

CVE-2022-27538

Summary of CVE-2022-27538 (HP BIOS TOCTOU): A TOCTOU vulnerability identified in the BIOS of certain HP PC products could allow arbitrary code execution, denial of service, and information disclosure. The impact and affected component are stated as BIOS-level for HP PCs, with a local attack vecto...