CVE-2021-3849

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected...

CVE-2021-3849

CVE-2021-3849 affects Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware. The vulnerability is an authentication bypass in the web interfaces that could allow an unauthenticated attacker to execute commands on the SMM and FPC2; SMM2 is not affected. Public docu...

CVE-2022-1107

The CVE-2022-1107 entry concerns Lenovo ThinkPad BIOS vulnerability where the use of Boot Services in the SmmOEMInt15 SMI handler can allow a local attacker with elevated privileges to execute arbitrary code. Affected component: BIOS boot services logic within SMM handling. Root cause: privilege ...

CVE-2021-3849: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected...

CVE-2022-22558

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

Design/Logic Flaw

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

CVE-2022-22558

CVE-2022-22558 affects Dell PowerEdge Server BIOS and Dell Precision Workstation 7910/7920 Rack BIOS. Description: an Improper SMM communication buffer verification vulnerability could allow a Local High-Privileged attacker to cause arbitrary writes or denial of service. Documents indicate this i...

CVE-2022-22558

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS, Alienware Systems

Five new security weaknesses have been disclosed in Dell BIOS that, if successfully exploited, could lead to code execution on vulnerable systems, joining the likes of firmware vulnerabilities recently uncovered in Insyde Software's InsydeH2O and HP Unified Extensible Firmware Interface UEFI...

Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85082)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...

Dell BIOS Input Validation Vulnerability

Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...

Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85081)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...

Dell BIOS Input Validation Vulnerability (CNVD-2022-20686)

Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24419

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

Input validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24419

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...