CVE-2020-0529

Improper initialization in BIOS firmware for 8th, 9th and 10th Generation IntelR CoreTM Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0529

CVE-2020-0529 affects Intel BIOS firmware for 8th–10th Gen Core processors, with root cause categorized as improper initialization in the BIOS, potentially allowing escalation of privilege via local access by an unauthenticated user. Public sources in the connected documents confirm Intel’s IPU B...

CVE-2020-0528

Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation IntelR CoreTM Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0528

CVE-2020-0528 concerns Intel BIOS firmware for 7th–10th Gen Core processors with Improper buffer restrictions. The vulnerability could allow an authenticated local attacker to escalate privileges and/or cause a denial of service via local access due to insufficient bounds checking in BIOS code. P...

CVE-2020-5363

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

CVE-2020-5363

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

Authorization

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

Hardcoded credentials

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

CVE-2020-5363

Dell CVE-2020-5363 affects select Dell Client Client Consumer and Commercial platforms, where the BIOS Admin password can be changed through Dell’s manageability interface without the current password. This could allow an attacker with physical access or OS administrator privileges to gain privil...

CVE-2020-5363

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS...

CVE-2020-5362

CVE-2020-5362 affects Dell Client Client Consumer and Commercial platforms, where an improper authorization in the Dell Manageability interface allows an attacker with local OS administrator privileges to bypass BIOS Administrator authentication and restore BIOS Setup to default values. The NVD e...

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup...

Critical Intel Flaws Fixed in Active Management Technology

Intel has released its June security updates, which address two critical vulnerabilities that, if exploited, can give unauthenticated attackers elevated privileges. The critical flaws exist in Intel’s Active Management Technology AMT, which is used for remote out-of-band management of personal...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Privilege escalation

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Design/Logic Flaw

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...