GIGABYTE BRIX Mini PCs suffer from a flawed firmware protection mechanism vulnerability

GIGABYTE is a professional motherboard manufacturer in Taiwan, GB-BSi7H-6500 and GB-BXi7-5775 are the BRIX series of mini PCs. UEFI, or Unified Extensible Firmware Interface, is a standard that describes a detailed type of interface. This interface is used to automatically load the operating syst...

S2-046 and S2-045 Remote Code Execution Vulnerabilities in AVCON6 System Management Platform of Huaping Information Technology Co.

Huaping Information Technology Co., Ltd. is a multimedia communication system and smart city solution provider. S2-046 and S2-045 remote code execution vulnerabilities exist in the AVCON6 system management platform of Huaping Information Technology Co. It allows an attacker to remotely execute...

The CIS Critical Security Controls Explained - Control 2: Inventory of Authorized and Unauthorized Software

As I mentioned in our last post, the 20 critical controls are divided into System, Network, and Application families in order to simplify analysis and implementation. This also allows partial implementation of the controls by security program developers who aren't building a program from scratch,...

Intel Processor Memory Sinkhole Vulnerability

Lenovo Security Advisory: LEN-3748 Summary: Memory Sinkhole Vulnerability Description: In August 2015 at the Black Hat security conference, researcher Chris Domas presented a vulnerability found in Intel x86 processors manufactured between 1997 and 2010 prior to the Sandy Bridge generation. Throu...

AMI BIOS SMM Code Execution Vulnerability

Lenovo Security Advisory: LEN-4710 Potential Impact: Execution of code in SMM by an attacker with administrative access Severity: Medium Scope of impact: Industry-wide Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. Software System...

CVE-2016-6449

A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...

CVE-2016-6449

CVE-2016-6449 affects Cisco FireAMP Connector Endpoint software. It describes a local denial-of-service risk where an authenticated, local attacker can stop certain protected FireAMP system processes via the lack of proper access controls on system utilities used to troubleshoot processes. The co...

Intel Branded NUC Kits Privilege Acquisition Vulnerability

Intel Branded NUC Kits are a series of host kits for Mini computers from Intel Corporation USA. A privilege-acquisition vulnerability exists in the BIOS firmware in Intel Branded NUC Kits. A local attacker could use this vulnerability to gain access to System Management Mode and take full control...

CVE-2016-8103

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

Design/Logic Flaw

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

CVE-2016-8103

CVE-2016-8103 affects Intel Branded NUC Kits. The issue is a System Management Mode (SMM) call-out that enables a local privileged user to access SMM and take full control of the platform. Public descriptions in the NVD entry indicate local attack with high privileges and high impact on confident...

CVE-2016-8103

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

CentOS 6 / 7 : sudo (CESA-2016:2872)

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Moderate: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Intel® Branded NUC’s Vulnerable to SMM Exploit

Summary: Intel is releasing updated BIOS firmware for a privilege escalation issue. This issue affects Intel® NUC Kits listed in the affected products section below. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03653)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP System Management Homepage SetSMHData admin-group Parameter Handling RCE

The HP System Management Homepage SMH running on the remote host is affected by a remote code execution vulnerability due to an overflow condition in the modsmhconfig.so library caused by improper validation of user-supplied input when parsing the admin-group parameter supplied to the...

HP System Management Homepage < 7.6 Multiple Vulnerabilities (HPSBMU03653) (httpoxy)

According to its banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.6. It is, therefore, affected by the following vulnerabilities : - A heap buffer overflow condition exists in OpenSSL in the EVPEncodeUpdate function within file...

HPE System Management Homepage Buffer Overflow Vulnerability (CNVD-2016-10580)

HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. A buffer overflow vulnerability exists in versions prior to HPE SMH v7.6, which can be exploited by remote attackers to cause a denial of service...

HPE System Management Homepage Information Disclosure Vulnerability

HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. A security vulnerability exists in versions of HPE SMH prior to v7.6, which can be exploited by remote attackers to obtain sensitive information...