CVE-2016-4395: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

PT-2016-5938

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue is related to a "Buffer Overflow" and allows remote attackers to have an unspecified impact. It is described as a Stack Buffer Overflow Remote Code Execution issue...

PT-2016-3098

Name of the Vulnerable Software and Affected Versions AMI UsbRt microcode versions affected versions not specified Description The issue is related to errors in the System Management Interrupt SMI handler of the AMI UsbRt microcode for Intel NUC motherboards. Exploitation of this issue can allow ...

SmmRuntime Escalation of Privilege

Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects the UEFI BIOS of select Intel Products. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious attacker with local administrati...

PT-2016-6759

Name of the Vulnerable Software and Affected Versions IBM Tivoli Lightweight Infrastructure LWI versions in AIX 5.3, 6.1, and 7.1 IBM System Director Console for AIX pconsole affected versions not specified Web Based System Management Remote Client WebSM Remote affected versions not specified...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.2 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.1 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

HPSBBHF3549 ThinkPwn UEFI BIOS SmmRuntime Escalation of Privilege

Potential Security Impact System downtime, or privilege escalation. Source:HP, HP Product Security Response Team PSRT Reported by: Dmytro Oleksiuk VULNERABILITY SUMMARY A security vulnerability identified with UEFI firmware, dubbed ThinkPwn, has been addressed in certain HP commercial notebook PC...

SMM

No description provided...

SMM "Incursion" Attack

Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...

Scope of ThinkPwn UEFI Zero Day Expands

A serious hardware vulnerability, thought to be confined to UEFI drivers in Lenovo and HP laptops, has also been found in firmware running on motherboards sold by Gigabyte. The flaw was publicly disclosed last week by researcher Dmytro Oleksiuk. No patches are yet available. Oleksiuk said the fla...

Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability

BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...

Lenovo BIOS EFI Driver Arbitrary Code Execution Vulnerability

Lenovo BIOS EFI Driver is a set of EFI Extensible Firmware Interface drivers for BIOS from Lenovo, China. An arbitrary code execution vulnerability exists in the Lenovo BIOS EFI Driver. A local attacker can exploit this vulnerability to execute arbitrary code with System Management Mode SMM...

CVE-2016-5729

Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...

Code injection

Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...

CVE-2016-5729

CVE-2016-5729 is a Lenovo BIOS EFI Driver SMM code-execution vulnerability. A local attacker with administrative privileges can run arbitrary code in System Management Mode. Connected Lenovo advisory LEN-4901 confirms impact and provides per-product minimum fix versions (BIOS updates) to mitigate...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Exploit for windows platform in category local exploits Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article:...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article:...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article: http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html This code exploits 0day privileges escalatio...

The vulnerability of the HP System Management Homepage software allows a perpetrator to obtain confidential information.

The vulnerability of the HP System Management Homepage software relates to the lack of protection for operational data. Exploiting this vulnerability can allow an intruder acting locally to obtain confidential information...