AMD Secure Processor Input Verification Error Vulnerability

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor. An attacker could exploit this vulnerability to cause an integer overflow, resulting in a denial of service...

AMD Secure Processor Buffer Error Vulnerability

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. ASP AMD Secure Processor suffers from a security vulnerability that stems from insufficient boundary checking. An attacker exploits the vulnerability to write partially controlled data to the SMM or SEV-E...

AMD System Management Unit buffer error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. The AMD System Management Unit has a security vulnerability that stems from the fact that its software interface between the ASP and the SMU may not enforce the SNP memory security policy, leading to a...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV, which stems from insufficient authentication of commands, which...

Multiple AMD products have vulnerabilities in input validation.

AMD System Management Mode and others are products of Ultraviolet Semiconductor AMD, Inc.AMD System Management Mode is a system management mode. A CPU execution mode.AMD System Management Unit SMU is a system management unit.AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip. Multiple A...

AMD System Management Unit (SMU) input validation vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation and could allow a physical attacker to disclose the contents of memory over the I2C bus,...

AMD System Management Unit (SMU) input validation vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation and could allow an attacker to incorrectly lock down resources, resulting in a denial of...

AMD System Management Unit (SMU) input validation vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation of BIOS mailbox messages, which could lead to an out-of-bounds memory read that could result...

PT-2023-1485 · Amd · Amd Secure Encrypted Virtualization (Sev) Firmware

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description: The issue is related to improper input validation and bounds checking in the SEV firmware, which may cause a buffer overflow in memory. This could...

SUSE: Security Advisory (SUSE-SU-2023:0036-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dridex Malware Now Attacking macOS Systems with Novel Infection Method

A variant of the infamous Dridex banking malware has set its sights on Apple's macOS operating system using a previously undocumented infection method, according to latest research. It has "adopted a new technique to deliver documents embedded with malicious macros to users without having to...

Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain

A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...

io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=2.2.3.final), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=2.2.3.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =2.2.3.final Source cves: CVE-2022-47551 Source advisory: GHSA-J94P-HV25-RM5G...

io.apiman:apiman-manager-api-micro (>=1.5.7.final, <=3.0.0.rc6), io.apiman:apiman-manager-api-war (>=1.5.7.final, <=2.0.0.final) +3 more potentially affected by CVE-2022-47551 via io.apiman:apiman-manager-api-rest-impl (>=1.5.7.final, <=3.0.0.rc6)

io.apiman:apiman-manager-api-rest-impl MAVEN version =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =1.5.7.final, =3.0.0.rc6 Source cves: CVE-2022-47551 Source advisory: OSV:GHSA-J94P-HV25-RM5G...

PT-2022-6208 · Trend Micro · Trend Micro Maximum Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Maximum Security version 17.7 Description: A vulnerability exists in Trend Micro Maximum Security wherein a low-privileged user can write a known malicious executable to a specific location. During the removal and restoration...

SUSE: Security Advisory (SUSE-SU-2022:4630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service

Overview Trend Micro Incorporated has released security updates for Apex One and Apex One as a Service. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Privilege escalation and file deletion in Damage Cleanup Engine compone...

CISO's Challenges Involved with Business Leader & SOC

Yohei Ishihara, IoT security evangelist at Trend Micro, discussed the challenges CISOs facing within organizations driving industrial IoT...

CVE-2022-45798

A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file. Please note: an attacker must first obtain...

Spoofing

A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file. Please note: an attacker must first obtain...