2787 matches found
CVE-2017-0616
CVE-2017-0616 describes an elevation of privilege in the MediaTek system management interrupt driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. Affected product: Android. Impact is rated High, because exploitation requires first compromising a ...
CVE-2017-0616: Undefined Security Weakness
An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product:...
PT-2017-2165
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a lack of access control in the MediaTek system management interrupt driver in the Android operating system. This could allow a remote attacker to execute arbitrary co...
Google Android MediaTek system management interrupt driver elevation of privilege vulnerability
Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android MMediaTek system management interrupt driver, which can be exploited by a remote attacker to build a malicious application that can be elevated in privileg...
PT-2017-3801
Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2542-HSPA versions 3.0 or lower Moxa ioLogik 2500 series firmware versions 3.0 or lower Moxa Ioxpress Configuration Utility versions 2.3.0 or lower Description The issue is related to the use of the HTTP protocol by default for...
The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.
The vulnerability of the SMM driver in the AMI USB-Rt microprogramming system for motherboards with Intel chips is related to errors in the operation of the SMI system interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the...
The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.
The vulnerability of the SMM driver in the AMI NvmeSmm microprogramming system for motherboards with Intel chipsets relates to errors in the operation of the SMI interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the flash...
GIGABYTE BRIX Mini PCs suffer from a flawed firmware protection mechanism vulnerability
GIGABYTE is a professional motherboard manufacturer in Taiwan, GB-BSi7H-6500 and GB-BXi7-5775 are the BRIX series of mini PCs. UEFI, or Unified Extensible Firmware Interface, is a standard that describes a detailed type of interface. This interface is used to automatically load the operating syst...
S2-046 and S2-045 Remote Code Execution Vulnerabilities in AVCON6 System Management Platform of Huaping Information Technology Co.
Huaping Information Technology Co., Ltd. is a multimedia communication system and smart city solution provider. S2-046 and S2-045 remote code execution vulnerabilities exist in the AVCON6 system management platform of Huaping Information Technology Co. It allows an attacker to remotely execute...
The CIS Critical Security Controls Explained - Control 2: Inventory of Authorized and Unauthorized Software
As I mentioned in our last post, the 20 critical controls are divided into System, Network, and Application families in order to simplify analysis and implementation. This also allows partial implementation of the controls by security program developers who aren't building a program from scratch,...
Intel Processor Memory Sinkhole Vulnerability
Lenovo Security Advisory: LEN-3748 Summary: Memory Sinkhole Vulnerability Description: In August 2015 at the Black Hat security conference, researcher Chris Domas presented a vulnerability found in Intel x86 processors manufactured between 1997 and 2010 prior to the Sandy Bridge generation. Throu...
AMI BIOS SMM Code Execution Vulnerability
Lenovo Security Advisory: LEN-4710 Potential Impact: Execution of code in SMM by an attacker with administrative access Severity: Medium Scope of impact: Industry-wide Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. Software System...
CVE-2016-6449
A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...
CVE-2016-6449
CVE-2016-6449 affects Cisco FireAMP Connector Endpoint software. It describes a local denial-of-service risk where an authenticated, local attacker can stop certain protected FireAMP system processes via the lack of proper access controls on system utilities used to troubleshoot processes. The co...
CVE-2016-6449: Undefined Security Weakness
A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...
PT-2016-6922
Name of the Vulnerable Software and Affected Versions Cisco FireAMP Connector Endpoint software version 1 Description A vulnerability in the system management of certain FireAMP system processes could allow an authenticated, local attacker to stop certain protected FireAMP processes without...
Intel Branded NUC Kits Privilege Acquisition Vulnerability
Intel Branded NUC Kits are a series of host kits for Mini computers from Intel Corporation USA. A privilege-acquisition vulnerability exists in the BIOS firmware in Intel Branded NUC Kits. A local attacker could use this vulnerability to gain access to System Management Mode and take full control...
CVE-2016-8103
SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...
