Design/Logic Flaw

The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...

CVE-2015-0949

CVE-2015-0949 pertains to SMM (System Management Mode) call-outs that may run outside SMRAM in certain BIOS implementations (Dell Latitude E6430 A09, HP EliteBook 850 G1 L71 Ver. 01.09, and potentially others). Root cause: SMM code does not ensure function calls operate on SMRAM memory locations,...

2019.2 IPU – Intel® Processor Graphics SMM Advisory

Summary: A potential security vulnerability in System Management Mode SMM with Intel® Processor Graphics may allow information disclosure. Intel is releasing guidance to SMM developers to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0185 Description: Insufficient...

CVE-2019-0152

Insufficient memory protection in System Management Mode SMM and IntelR TXT for certain IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0152

Insufficient memory protection in System Management Mode SMM and IntelR TXT for certain IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0185

CVE-2019-0185 concerns insufficient access control in the protected memory subsystem for System Management Mode (SMM) on Intel processors. Affected are 6th–9th Gen Intel Core CPUs, Intel Xeon E3-1500 v5/v6, and Intel Xeon E-2100/E-2200 families with Intel Processor Graphics. The root cause is ina...

CVE-2019-0185

Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor families; IntelR XeonR Processor E3-1500 v5 and v6 families; IntelR XeonR E-2100 and E-2200 Processor families with IntelR Processor Graphics may allow a privileged user ...

HPSBHF03638 rev. 4 - Intel 2019.2 IPU BIOS Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for BIOS, Voltage...

CVE-2019-16284

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...

CVE-2019-16284

CVE-2019-16284 concerns a BIOS/firmware vulnerability in HP products where the EFI_BOOT_SERVICES structure can be overwritten to execute arbitrary SMM code, potentially leading to privilege escalation during boot. The Red Hat and NVD entries align with HP’s advisory (HP: C06456250), describing af...

Medium: edk2

Issue Overview: Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. CVE-2018-12182 Stack overflow in XHCI for EDK II may allow an unauthenticated...

F5 Networks BIG-IP : OS Kernel and SMM mode L1 Terminal Fault vulnerability (K95275140)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.2 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K95275140 advisory. - Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized...

Intel official for 5 on 15, the aeration out of the CPU side channel vulnerabilities“ZombieLoad”detailed technical analysis of under-vulnerability warning-the black bar safety net

Buffer override of the program sequence In the absence of enumeration MDCLEAR functions of the processor, certain instruction sequences can be used for cover by the MDS affect the buffer. You can point this, a detailed review of these sequences. Different processors may require different sequence...

Code injection

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

CVE-2019-6156

CVE-2019-6156 concerns Lenovo systems where SMM BIOS Write Protection prevents writes to SPI Flash, with an additional layer via SPI Protected Range Registers (PRx). After resuming from S3 sleep on various Lenovo BIOS versions, PRx is not set, but this does not compromise SMM BIOS Write Protectio...

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

CVE-2018-12182

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...