Lucene search
+L

3642 matches found

CVE
CVE
added 2018/10/05 2:0 p.m.72 views

CVE-2018-15370

CVE-2018-15370 affects Cisco IOS ROM Monitor (ROMMON) on Catalyst 6800 Series switches. A hidden command in ROMMON enables an unauthenticated, local attacker to force the device into ROMMON mode via the console and write a malicious pattern to a memory address, bypassing Cisco Secure Boot signatu...

6.8CVSS6.6AI score0.00361EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/10/05 2:0 p.m.29 views

CVE-2018-15370 Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

6.7AI score0.00361EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2018/10/04 3:0 p.m.55 views

LoJack for computers used to attack European government bodies

Security researchers have detected the first known instance of a UEFI bootkit being used in targeted campaigns against government entities across Central and Eastern Europe. The attack focuses on UFEI-enabled computers and relies on a persistence mechanism that has been stolen from a legitimate,...

1.4AI score
SaveExploits0
CNVD
CNVD
added 2018/09/29 12:0 a.m.7 views

Local Security Bypass Vulnerability in IOS ROM Monitor Software for Multiple Cisco Products

Cisco Catalyst 6800 Series Supervisor Engine 6T and others are switch products from Cisco USA. the IOS ROM Monitor ROMMON Software is one of the set of ROM monitoring software for iOS devices. A privilege license and access control vulnerability exists in IOS ROMMON Software in multiple Cisco...

6.8CVSS6.6AI score0.00361EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/09/26 4:0 p.m.67 views

Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

6.4CVSS2.1AI score0.00361EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/09/13 12:0 a.m.12 views

Microsoft Windows: Turn On Virtualization Based Security (Select Platform Security Level)

Specifies whether Virtualization Based Security is enabled. Virtualization Based Security uses the Windows Hypervisor to provide support for security services. Virtualization Based Security requires Secure Boot, and can optionally be enabled with the use of DMA Protections. DMA protections requir...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/09/13 12:0 a.m.13 views

Microsoft Windows: Turn On Virtualization Based Security (Credential Guard Configuration)

Specifies whether Virtualization Based Security is enabled. Virtualization Based Security uses the Windows Hypervisor to provide support for security services. Virtualization Based Security requires Secure Boot, and can optionally be enabled with the use of DMA Protections. DMA protections requir...

7.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2018/09/04 9:5 p.m.96 views

R0Ak (The Ring 0 Army Knife) - A Command Line Utility To Read/Write/Execute Ring Zero On For Windows 10 Systems

r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek r0ak v1.0.0 -- Ring 0 Army Knife...

7.5AI score
SaveExploits0References1
n0where
n0where
added 2018/08/22 5:9 p.m.24 views

Ring 0 Army Knife: r0ak

r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Motivation The Windows kernel is a rich environment in which hundreds of...

7.5AI score
SaveExploits0References1
Hewlett-Packard
Hewlett-Packard
added 2018/07/06 12:0 a.m.39 views

HPSBHF03586 rev. 1 - DCI Policy Update

Potential Security Impact Information disclosure and escalation of privilege via limited physical presence. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel platforms, starting with Skylake, support a USB 3-based debugging interface a.k.a. Direct...

7.6CVSS0.5AI score0.00364EPSS
SaveExploits0
CNVD
CNVD
added 2018/07/03 12:0 a.m.6 views

Unspecified Vulnerability in ECOS Secure Boot Stick (CNVD-2019-38286)

The ECOS Secure Boot Stick a.k.a. SBS is a security device from ECOS TECHNOLOGY, Germany for remote access to Citrix, Microsoft Terminal Server, VMware and other web applications. A security vulnerability exists in ECOS SBS version 5.6.5, which stems from the program not adequately verifying the...

8.1CVSS8.1AI score0.00428EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/03 12:0 a.m.6 views

Unspecified Vulnerability in ECOS Secure Boot Stick

The ECOS Secure Boot Stick a.k.a. SBS is a security device from ECOS TECHNOLOGY, Germany for remote access to Citrix, Microsoft Terminal Server, VMware and other web applications. A security vulnerability exists in ECOS SBS version 5.6.5 that stems from an undocumented vendor backdoor in the...

10CVSS9.2AI score0.01535EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/03 12:0 a.m.8 views

ECOS Secure Boot Stick Fuzzing Vulnerability

The ECOS Secure Boot Stick a.k.a. SBS is a security device from ECOS TECHNOLOGY, Germany for remote access to Citrix, Microsoft Terminal Server, VMware and other web applications. A security vulnerability exists in ECOS SBS version 5.6.5. An attacker can exploit the vulnerability to extract the...

4.6CVSS5AI score0.00344EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/03 12:0 a.m.6 views

ECOS Secure Boot Stick Authentication Bypass Vulnerability

The ECOS Secure Boot Stick a.k.a. SBS is a security device from ECOS TECHNOLOGY, Germany for remote access to Citrix, Microsoft Terminal Server, VMware and other web applications. A security vulnerability exists in ECOS SBS version 5.6.5. An attacker could exploit the vulnerability to bypass...

5.9CVSS5.8AI score0.00885EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/03 12:0 a.m.8 views

Unspecified Vulnerability in ECOS Secure Boot Stick

The ECOS Secure Boot Stick a.k.a. SBS is a security device from ECOS TECHNOLOGY, Germany for remote access to Citrix, Microsoft Terminal Server, VMware and other web applications. A security vulnerability exists in ECOS SBS version 5.6.5. An attacker could exploit the vulnerability to take contro...

8.5CVSS8.2AI score0.00805EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/03 12:0 a.m.7 views

Unspecified Vulnerability in ECOS Secure Boot Stick (CNVD-2019-38284)

The ECOS Secure Boot Stick a.k.a. SBS is a security device from ECOS TECHNOLOGY, Germany for remote access to Citrix, Microsoft Terminal Server, VMware and other web applications. A security vulnerability exists in ECOS SBS version 5.6.5. An attacker could exploit the vulnerability to take contro...

7.5CVSS7.7AI score0.00566EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/06/26 12:0 a.m.49 views

Microsoft Windows: Allow Secure Boot for integrity validation

This policy setting allows you to configure whether Secure Boot will be allowed as the platform integrity provider for BitLocker operating system drives. Secure Boot ensures that the PC Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, a...

7.2AI score
SaveExploits0References1
Cisco
Cisco
added 2018/06/20 4:0 p.m.118 views

NVIDIA TX1 Boot ROM Vulnerability

On April 24, 2018, researchers disclosed a vulnerability that takes advantage of a buffer overflow vulnerability in NVIDIA TX1 BootROM when Recovery Mode RCM is active. This vulnerability could allow an unprivileged, local attacker to bypass secure boot and execute unverified code on an affected...

6.8CVSS6.8AI score0.0274EPSS
SaveExploits1References1
NVD
NVD
added 2018/06/17 4:29 p.m.25 views

CVE-2018-12337

Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to partially extract confidential configurations via user-space emulation...

4.6CVSS4.7AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
added 2018/06/17 4:29 p.m.21 views

CVE-2018-12330

Protection Mechanism Failure in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware...

8.5CVSS8.1AI score0.00805EPSS
SaveExploits0References1
Rows per page
Query Builder