4158 matches found
CVE-2022-20826: Trust Boundary Violation
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...
Threat Source newsletter (Nov. 10, 2022): Vulnerability research, movies in class, and Emotet once again
Welcome to this weeks edition of the Threat Source newsletter. Tuesday was an absolute hammer for the infosec community. Not only did we have the US elections but we had Emotet returning and a regular Microsoft Tuesday release. That release always leads me to think about the bug hunting ecosystem...
CVE-2022-20826
CVE-2022-20826 affects Cisco Secure Firewalls 3100 Series running ASA or FTD software. Root cause is a logic error in the secure boot boot process, enabling an unauthenticated attacker with physical access to bypass secure boot, inject code at a specific memory location, and execute persistent co...
CVE-2022-20826
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...
PT-2022-22129 · Lenovo · Lenovo Ideapad Y700-14Isk
Name of the Vulnerable Software and Affected Versions: Lenovo Ideapad Y700-14ISK affected versions not specified Description: A potential issue in a driver used during the manufacturing process may allow an attacker with elevated privileges to modify secure boot settings by altering an NVRAM...
PT-2022-22120 · Lenovo · Lenovo Notebook
Name of the Vulnerable Software and Affected Versions: Lenovo Notebook devices affected versions not specified Description: A potential issue in a driver used during the manufacturing process on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure...
PT-2022-6630 · Lenovo · Wmi Setup Driver
Name of the Vulnerable Software and Affected Versions: Lenovo Notebook devices affected versions not specified Description: The issue is related to a potential vulnerability in the WMI Setup driver, which may allow an attacker with elevated privileges to modify secure boot settings. This can be...
Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...
Cisco Firepower Threat Defense security vulnerabilities
Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...
PT-2022-5688 · Cisco · Cisco Secure Firewalls 3100 Series +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewalls 3100 Series versions affected versions not specified Description: A vulnerability in the secure boot implementation could allow an unauthenticated attacker with physical access to the device to bypass the secure boot...
Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US
No description provided...
Nokia ASIK AirScale 5G Common System Module security vulnerabilities
The Nokia ASIK AirScale 5G Common System Module is a common system unit from Nokia, Finland. A security vulnerability exists in Nokia ASIK AirScale 5G Common System Module versions 474021A.101 and 474021A.102, which arises from its boot loader loading a public key used for firmware verification...
CVE-2022-24936 Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...
CVE-2022-24936 Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-2611)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
August 9, 2022—KB5016684 (Security-only update)
None None...
August 9, 2022—KB5016623 (OS Build 17763.3287)
None None...
August 9, 2022—KB5016622 (OS Build 14393.5291) - EXPIRED
None None...