634 matches found
CVE-2021-3452
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
SQL Injection Vulnerability in SMi CMS Education Group Website Group System
SMi CMS education group station group system is mainly oriented to education group, education bureau of primary and secondary school station group platform. SQL injection vulnerability exists in SMiCMS Education Group Web Group System, which can be exploited by attackers to obtain sensitive...
System Management Mode deep dive: How SMM isolation hardens the platform
Ensuring that the platform firmware is healthy and trustworthy is fundamental to guaranteeing that powerful platform security features like Hypervisor-protected code integrity HVCI and Windows Defender Credential Guard are functioning as expected. Windows 10 achieves this by leveraging a...
CVE-2020-8354
A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution...
Code injection
A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution...
CVE-2020-8354
A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution...
CVE-2020-8354
CVE-2020-8354 affects Lenovo notebook models, where the vulnerability lies in the SMI callback function used by the VariableServiceSmm driver. The issue could allow arbitrary code execution via a local attack that requires high privileges and no user interaction, using the SMI pathway on affected...
CVE-2020-8332
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected...
CVE-2020-8332
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected...
Code injection
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected...
CVE-2020-8332
The CVE-2020-8332 issue is tied to the SMI callback function in legacy BIOS mode USB drivers on some legacy Lenovo and IBM System x servers. The vulnerability may allow arbitrary code execution, with UEFI-mode systems unaffected. The affected component is the legacy BIOS USB driver stack; root ca...
CVE-2020-8332
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected...
System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US
Lenovo Security Advisory: LEN-38625 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8332 Summary Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and...
DLL Hijacking in NVIDIA SMI
What is NVIDIA SMI? The NVIDIA System Management Interface nvidia-smi is a command line utility, based on top of the NVIDIA Management Library NVML, intended to aid in the management and monitoring of NVIDIA GPU devices. This utility allows administrators to query GPU device state and with the...
CVE-2020-8333
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution...
CVE-2020-8333
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution...
CVE-2020-8333
CVE-2020-8333 describes a vulnerability in the SMI callback function used by the EEPROM driver on some Lenovo Desktops and ThinkStation models, potentially enabling arbitrary code execution. Exploitation would require local access (no user interaction) with low attack complexity, and could impact...
CVE-2020-8322
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...