PT-2019-16662 · Dell · Dell Client Commercial +1

Name of the Vulnerable Software and Affected Versions: Dell Client Commercial and Consumer platforms affected versions not specified Description: The issue allows an unauthenticated attacker with physical access to bypass Secure Boot restrictions, enabling them to run unsigned and untrusted code ...

Bug in NVIDIA’s Tegra Chipset Opens Door to Malicious Code Execution

A flaw impacting millions of mobile and internet of things IoT devices running NVIDIA’s Tegra processor opens the door for a variety of attacks, including device hijacking or siphoning of data. The warning comes from researcher Triszka Balázs, who discovered the flaw and asserts that the bug...

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...

Servicing stack update for Windows 10, Version 1703: July 9, 2019

None None...

Servicing stack update for Windows 10, Version 1903: July 9, 2019

None None...

Servicing stack update for Windows 10, Version 1607: July 9, 2019

None None...

Servicing stack update for Windows 10, Version 1507: July 9, 2019

None None...

Servicing stack update for Windows 10, Version 1709: July 9, 2019

None None...

Servicing stack update for Windows 10, Version 1809: July 9, 2019

None None...

Servicing stack update for Windows 10, Version 1803: July 9, 2019

None None...

The vulnerability of the Secure Boot function in Cisco microprogramming devices’ network devices relates to errors in code integrity checking. This vulnerability allows attackers to install malicious software onto these devices.

The vulnerability of the Secure Boot function in Cisco microprogramming devices relates to code integrity checks. Exploiting this vulnerability could allow attackers to install malicious software...

Design/Logic Flaw

Marvell SSD Controller 88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098 devices are vulnerable in manipulating a combination of IO pins to bypass the secur...

CVE-2019-10637

Marvell SSD Controller 88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098 devices are vulnerable in manipulating a combination of IO pins to bypass the secur...

CVE-2019-10637

CVE-2019-10637 affects Marvell SSD Controller family devices (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, and 88SS1098). The vulnerability arises from the abilit...

CVE-2019-10637

Marvell SSD Controller 88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098 devices are vulnerable in manipulating a combination of IO pins to bypass the secur...

Design/Logic Flaw

Marvell SSD Controller 88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098 devices allow reprogramming flash memory to bypass the secure boot protection...

CVE-2019-10636

Marvell SSD Controller 88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098 devices allow reprogramming flash memory to bypass the secure boot protection...

CVE-2019-10636

CVE-2019-10636 affects Marvell SSD Controller devices (88SS10xx family) and enables reprogramming of flash memory to bypass the secure boot protection mechanism. The description lists numerous controller variants (e.g., 88SS1074/1079/1080/1093/1092/1095/9174/9175/9187/9188/9189/9190/1085/1087/109...

Cisco Firepower Threat Defense (FTD) Secure Boot Hardware Tampering Vulnerability (cisco-sa-20190513-secureboot)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote host is affected by a vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local...

Cisco Starts Patching Firmware Bug; Millions of Devices Still Vulnerable

Cisco has issued a handful of firmware releases for a high-severity vulnerability in Cisco’s proprietary Secure Boot implementation that impacts millions of its hardware devices, across the scope of its portfolio. The patches are the first in a planned series of firmware updates that will roll ou...