Dell Inspiron 7352 BIOS Boot Service Override Vulnerability

Dell Inspiron 7352 BIOS is a system update driver for Dell Dell. Dell Inspiron 7352 BIOS versions prior to A12 are vulnerable to a UEFI BIOS boot service override vulnerability, which could allow an attacker to override the EFIBOOTservice structure to execute arbitrary code in System Management...

Dell Inspiron 7347 BIOS Boot Service Override Vulnerability

Dell Inspiron 7347 BIOS is a system update driver for Dell Dell. Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS boot service override vulnerability that allows an attacker to override the EFIBOOTservice structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5376

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5379

Dell Inspiron 7352 BIOS versions prior to A12 are affected by a UEFI BIOS Boot Services overwrite vulnerability that allows a local attacker with memory access to overwrite EFI_BOOT_SERVICES and execute arbitrary code in System Management Mode (SMM). Dell lists a BIOS update to A12 as the mitigat...

CVE-2020-5376

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5376

CVE-2020-5376 affects Dell Inspiron 7347 BIOS prior to A13, where a UEFI BIOS Boot Services overwrite vulnerability allows a local attacker with memory access to overwrite EFI_BOOT_SERVICES and execute arbitrary code in System Management Mode (SMM). The issue is tied to BIOS versions before A13; ...

CVE-2020-5378

This entry concerns Dell G7 17 7790 BIOS versions prior to 1.13.2 with a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory could overwrite the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM). The affected component...

CVE-2020-8335

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorize...

CVE-2020-8341

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...

CVE-2020-8335

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorize...

Code injection

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPa...