CVE-2016-4393

HP/HPE System Management Homepage (SMH) is affected by CVE-2016-4393, a cross-site scripting vulnerability in versions before 7.6. The issue allows a remote authenticated attacker to obtain sensitive information via unspecified vectors. Affected product/version: SMH prior to v7.6. Root cause: XSS...

CVE-2016-4394

HP System Management Homepage (SMH) vulnerable to CVE-2016-4394: an HSTS bypass allows remote attackers to obtain sensitive information on SMH versions prior to 7.6. The connected OpenVAS/NVT entries corroborate an HSTS-related disclosure vulnerability affecting HP SMH, but detailed technical spe...

SmmRuntime Escalation of Privilege

Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects the UEFI BIOS of select Intel Products. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious attacker with local administrati...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.2 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.1 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

HPSBBHF3549 ThinkPwn UEFI BIOS SmmRuntime Escalation of Privilege

Potential Security Impact System downtime, or privilege escalation. Source:HP, HP Product Security Response Team PSRT Reported by: Dmytro Oleksiuk VULNERABILITY SUMMARY A security vulnerability identified with UEFI firmware, dubbed ThinkPwn, has been addressed in certain HP commercial notebook PC...

SMM

No description provided...

SMM "Incursion" Attack

Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...

Scope of ThinkPwn UEFI Zero Day Expands

A serious hardware vulnerability, thought to be confined to UEFI drivers in Lenovo and HP laptops, has also been found in firmware running on motherboards sold by Gigabyte. The flaw was publicly disclosed last week by researcher Dmytro Oleksiuk. No patches are yet available. Oleksiuk said the fla...

Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability

BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...

Lenovo BIOS EFI Driver Arbitrary Code Execution Vulnerability

Lenovo BIOS EFI Driver is a set of EFI Extensible Firmware Interface drivers for BIOS from Lenovo, China. An arbitrary code execution vulnerability exists in the Lenovo BIOS EFI Driver. A local attacker can exploit this vulnerability to execute arbitrary code with System Management Mode SMM...

CVE-2016-5729

Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...

Code injection

Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...

CVE-2016-5729

CVE-2016-5729 is a Lenovo BIOS EFI Driver SMM code-execution vulnerability. A local attacker with administrative privileges can run arbitrary code in System Management Mode. Connected Lenovo advisory LEN-4901 confirms impact and provides per-product minimum fix versions (BIOS updates) to mitigate...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Exploit for windows platform in category local exploits Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article:...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article:...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article: http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html This code exploits 0day privileges escalatio...

The vulnerability of the HP System Management Homepage software allows a perpetrator to obtain confidential information.

The vulnerability of the HP System Management Homepage software relates to the lack of protection for operational data. Exploiting this vulnerability can allow an intruder acting locally to obtain confidential information...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03593)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP System Management Homepage < 7.5.4.3 AddCertsToTrustCfgList DoS

The version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.5.4.3. It is, therefore, affected by a flaw in the AddCertsToTrustCfgList function within file modsmhconfig.so due to improper extraction of the common name in the subject when processing X.509...