2279 matches found
CVE-2023-52111
CVE-2023-52111 concerns an authorization vulnerability in the BootLoader module of Huawei HarmonyOS. The issue is described as affecting theBootLoader component with potential integrity impact; CVSS v3.1 base score 7.5 (High) with Network attack vector, no user interaction required, and no confid...
CVE-2023-52111: Improper Authentication
Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity...
PT-2024-14408
Name of the Vulnerable Software and Affected Versions BootLoader module affected versions not specified Description The issue is related to an authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity. There is no information...
CVE-2023-4818
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
CVE-2023-4818
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
Design/Logic Flaw
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
CVE-2023-4818
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
CVE-2023-4818
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
CVE-2023-4818
CVE-2023-4818 affects PAX A920 bootloader downgrade due to a bug in the version check. The signature check remains intact and only bootloaders signed by PAX are accepted. Exploitation requires physical USB access to the device. The connected documents confirm the vulnerability and its physical-ac...
PT-2024-1564 · Pax · Pax A920
Name of the Vulnerable Software and Affected Versions: PAX A920 device affected versions not specified Description: The issue is related to a bug in the version check of the PAX A920 device's bootloader, allowing it to be downgraded. The device correctly checks the signature and only allows...
CVE-2023-4818: Improper Neutralization of Special Elements in Output Used by a Downstream Component
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
DEBIAN-CVE-2024-23301
Relax-and-Recover aka ReaR through 2.7 creates a world-readable initrd when using GRUBRESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root...
Information disclosure
Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920 allow Information Disclosure in the Bootloader...
CVE-2023-43122: Out-of-bounds Write
Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920 allow Information Disclosure in the Bootloader...
CVE-2023-43122
CVE-2023-43122 concerns Samsung Mobile Processor and Wearable Processor families (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) and is described as an Information Disclosure in the Bootloader. The Red Hat entry and PT-Security/PT-2023-28707 corroborate the issue on these Exynos l...
CVE-2023-43122
Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920 allow Information Disclosure in the Bootloader...
PT-2023-28707 · Samsung · Exynos 1330 +8
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920 Description: The issue allows Information Disclosure in the Bootloader. Recommendations: At the moment, there is no information abou...
SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2023:4654-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4654-1 advisory. Update AMD ucode to 20231030 bsc1215831: - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attack...
SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2023:4665-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4665-1 advisory. Update AMD ucode to 20231030 bsc1215831: - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attack...