PT-2020-18448

Name of the Vulnerable Software and Affected Versions Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 Description The issue is related to an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by...

CVE-2020-5388

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2015-0949

The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...

CVE-2015-0949: Improper Privilege Management

The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...

AMI BIOS System Management Mode Vulnerability - US

Lenovo Security Advisory: LEN-24238 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Industry-wide Summary Description: AMI has reported to Lenovo that the System Management Mode SMM module was not properly validating buffers in the BIOS supplied by AMI...

AMI BIOS System Management Mode Vulnerability - Lenovo Support US

No description provided...

Intel® Branded NUC’s Vulnerable to SMM exploit

Summary: Intel is releasing updated BIOS firmware for a privilege escalation issue. This issue affects Intel® NUC Kits listed in the Model Number section below. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious...

SMM "Incursion" Attack

Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...

SMRAM data may be viewed on ThinkPad systems

Lenovo Security Advisory: LEN-3837 Potential Impact: Leakage of SMRAM data Severity: Low Summary: An attacker may be able to view but not modify the contents of System Management RAM SMRAM data on certain Lenovo ThinkPad systems. Description: SMRAM is a part of system memory used by the processor...

SMRAM data may be viewed on ThinkPad systems - Lenovo Support US

No description provided...

BIOS implementations permit unsafe SMM function calls to memory locations outside of SMRAM

Overview Multiple BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of SMRAM. Description Multiple BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of SMRAM. According to Corey Kallenber...

UEFI implementations do not properly secure the EFI S3 Resume Boot Path boot script

Overview Some UEFI systems fail to properly restrict access to the boot script used by the EFI S3 Resume Boot Path, allowing an authenticated, local attacker to bypass various firmware write protections. Description According to Rafal Wojtczuk of Bromium and Corey Kallenberg of The MITRE...

CVE-2006-6730

OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode SMM handler via a write to an SMRAM address within /dev/xf86 aka the video card...

CVE-2006-6730

OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode SMM handler via a write to an SMRAM address within /dev/xf86 aka the video card...