CVE-2022-34398

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system...

CVE-2022-34403

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM...

CVE-2022-34403

Dell BIOS contains a stack-based buffer overflow vulnerability. A locally authenticated attacker can trigger it by sending larger-than-expected input via System Management Interrupt (SMI), gaining arbitrary code execution in SMRAM. Affected component is Dell BIOS (embedded software on motherboard...

CVE-2022-40135

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40136

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40134

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40137

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code...

Information disclosure

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

Information disclosure

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

Information disclosure

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

Buffer overflow

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2022-40137

CVE-2022-40137 is a Lenovo-related issue describing a buffer overflow in the WMI SMI Handler. Multiple sources (Red Hat, NVD, CVE lists, PT-2022-25238) confirm the vulnerability could let an attacker with local access and elevated privileges execute arbitrary code. Connected documents do not prov...

CVE-2022-40137

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2022-40136

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40136

Technical details about CVE-2022-40136 (Lenovo SMI Handler information leak) are not publicly provided in the connected documents. Monitor for updates from Lenovo/NVD/Red Hat and related advisories.

CVE-2022-40136

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40135

CVE-2022-40135 concerns an information-leak in the Smart USB Protection SMI Handler affecting Lenovo devices. The vulnerability may allow a local attacker with elevated privileges to read SMM memory. The PT-2022-25236 entry confirms the issue but provides no specific affected models/versions or a...

CVE-2022-40134

CVE-2022-40134 concerns a vulnerability in the SMI Set BIOS Password SMI Handler on certain Lenovo models. The issue permits a locally privileged attacker to read SMM memory, causing potential information disclosure. Documented impact is an information leak with HIGH confidentiality impact and LO...

CVE-2022-34460

Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32490

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...