The vulnerability of BIOS microprogramming software in Dell laptops, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

K56215245: Intel CPU vulnerabilities CVE-2019-11136 and CVE-2019-11137

Security Advisory Description CVE-2019-11136 Insufficient access control in system firmware for IntelR XeonR Scalable Processors, 2nd Generation IntelR XeonR Scalable Processors and IntelR XeonR Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial ...

K46603852: Intel CPU vulnerability CVE-2017-5691

Security Advisory Description Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect...

CVE-2021-3439

HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS. An attacker exploiting this vulnerability could disable SPI flash protection, which could lead to denial of service, privilege escalation, or data...

AMD Client Vulnerabilities - January 2023 - Lenovo Support US

No description provided...

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP Company, USA. The HP PCs contain a security vulnerability that stems from the presence of a potential vulnerability found in the system BIOS that could allow elevation of privilege and code execution...

HP Workstation 安全漏洞

HP Workstation is a high-performance desktop computer from Hewlett-Packard HP. A security vulnerability exists in the HP Workstation BIOS UEFI firmware. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2022-36337

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driver leads to arbitrary code execution. Control of a UEFI variable under the OS can cause this overflow when read by BIOS code...

The vulnerability of the System Management Mode (SMM) implementation in HP notebook BIOS microprogramming systems allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the System Management Mode SMM implementation in HP notebook BIOS microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to disclose protected information.

The vulnerability of the BIOS microprogramming system of Intel processors is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s BiosCfgTool allows a hacker to execute arbitrary code, increase their privileges, or cause service failures.

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s BiosCfgTool is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, increase their privileges, or cause service failures...

Security Bulletin: Power System Firmware is affected by openssl vulnerabilities(CVE-2013-4353, CVE -2013-6449)

Summary Power System Firmware is affected by openssl vulnerabilities. Vulnerability Details CVE ID: CVE-2013-4353 DESCRIPTION: A carefully crafted invalid TLS handshake could crash OpenSSL with a NULL pointer exception. A malicious server could use this flaw to crash a connecting client. This iss...

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

Security Bulletin: This Power System update is being released to address CVE-2022-22374

Summary POWER9: In response to a security issue with firmware update, this security bulletin is being issued to address Common Vulnerabilities and Exposures issue number CVE 2022-22374. There is no Power System firmware update for this. Please follow the Remediation and Mitigation steps...

The vulnerability of BIOS microprogramming software in Dell laptops arises from an operation that goes beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of BIOS microprogramming software in Dell laptops, related to the execution of operations beyond buffer boundaries in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

IBM Power System安全漏洞

IBM Power System is a Power processor-based server computer from IBM U.S.A. The Power System firmware has a security vulnerability that could be exploited by an attacker to gain access to sensitive information using man-in-the-middle techniques...

Security Bulletin: This Power System update is being released to address CVE 2020-25705

Summary POWER9: In response to security issues with BMC's UDP network service, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2020-25705. Vulnerability Details CVEID: CVE-2020-25705 DESCRIPTION: Linux Kernel could allow a remo...

Lenovo ThinkPad 安全漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The ThinkPad suffers from a security vulnerability that stems from the fact that when the Enhanced Biometrics setting is enabled in the BIOS, the vulnerability could cause the system to crash...