5734 matches found
Authentication flaw
Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not...
CVE-2020-5361
Summary: CVE-2020-5361 concerns Dell client platforms that include a BIOS password reset capability intended for authorized password recovery. The vulnerability arises because tools not authorized by Dell can generate BIOS recovery passwords, potentially enabling a physically present attacker to ...
CVE-2020-5361
Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not...
Dell Client Commercial and Consumer Authorization Issues Vulnerability
Dell Client Commercial and Dell Consumer are a family of workstation devices from Dell, Inc. A security vulnerability exists in the Dell Client Commercial and Consumer platforms support, which can be exploited by an attacker to reset the BIOS password and the BIOS-managed hard disk drive HDD...
Exploit for CVE-2021-26943
SmmExploit This is a report and an exploit of CVE-2021-26943...
CVE-2020-5361
Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not...
NZXT CAM WinRing0x64 Driver IRP 0x9c406104 information disclosure vulnerability
Summary An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Tested...
TrickBot Returns with a Vengeance, Sporting Rare Bootkit Functions
The TrickBot malware has morphed once again, this time implementing functionality designed to inspect the UEFI/BIOS firmware of targeted systems. It marks a serious resurgence following an October takedown of the malware’s infrastructure by Microsoft and others. The Windows Unified Extensible...
TrickBot Malware Gets UEFI/BIOS Bootkit Feature to Remain Undetected
TrickBot, one of the most notorious and adaptable malware botnets in the world, is expanding its toolset to set its sights on firmware vulnerabilities to potentially deploy bootkits and take complete control of an infected system. The new functionality, dubbed "TrickBoot" by Advanced Intelligence...
VulnCheck KEV: CVE-2018-7445
In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system...
Vulnerability of Intel processor BIOS microprogramming software, allowing attackers to enhance their privileges
The vulnerability of Intel processor BIOS microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2020-8764
Improper access control in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8739
Use of potentially dangerous function in Intel BIOS platform sample code for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8740
Out of bounds write in Intel BIOS platform sample code for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8738
Improper conditions check in Intel BIOS platform sample code for some IntelR Processors before may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-0590
Improper input validation in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-0590
Improper input validation in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-0592
Out of bounds write in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...