CVE-2023-20587

CVE-2023-20587 describes improper access control in System Management Mode (SMM) that may allow a local attacker to access the SPI flash and potentially execute arbitrary code. The vulnerability is discussed across multiple sources: AMD’s AMD-SB-7009 bulletin references SMM-related CVEs including...

CVE-2023-20587

Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...

PT-2024-11958 · Unknown · System Management Mode

Name of the Vulnerable Software and Affected Versions: System Management Mode SMM affected versions not specified Description: The issue is related to improper access control in System Management Mode SMM, which may allow an attacker to access the SPI flash, potentially leading to arbitrary code...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

The vulnerability of the System Management component of the Oracle Integrated Lights Out Manager (ILOM) allows a attacker to gain read, modify, or delete access to data.

The vulnerability of the System Management component of the Oracle Integrated Lights Out Manager ILOM is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, or delete data...

The vulnerability of the System Management Mode (SMM) implementation of AMD microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the System Management Mode SMM implementation of AMD microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to gain access to read, modify, or delete data. This can enable the hacker to increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the SBIOS system’s NVIDIA DGX A100 server stems from the transition to System Management Mode SMM due to an SMI interrupt. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete data access rights, enhance their privileges, execute arbitrary code,...

PT-2024-1187 · Oracle · Oracle Integrated Lights Out Manager

Name of the Vulnerable Software and Affected Versions: Oracle Integrated Lights Out Manager ILOM versions 3 through 5 Description: The issue is related to insufficient input validation in the System Management component of Oracle Integrated Lights Out Manager ILOM. This easily exploitable...

NVIDIA DGX Security Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 Servers, which stems from an attacker could lead to an SMI markup vulnerability that could be used to execute arbitrary code at the SMM level...

Siemens SIMATIC

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Information disclosure

In default installations of Microchip maxView Storage Manager for Adaptec Smart Storage Controllers where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 exce...

PT-2024-41086

Name of the Vulnerable Software and Affected Versions Debian Linux affected versions not specified amd64-microcode affected versions not specified linux affected versions not specified Description The issue concerns a microcode signature verification vulnerability in AMD CPU. It affects packages...

CVE-2023-51708

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For...

CVE-2023-51708

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For...

PT-2023-31886 · Unknown · Eb System Management Console +1

Name of the Vulnerable Software and Affected Versions: eB System Management Console versions prior to 23.00.02.03 Assetwise ALIM For Transportation versions prior to 23.00.01.25 Description: The issue allows an unauthenticated user to view configuration options via a crafted request, leading to...

Selected Bentley Systems Products Security Vulnerabilities

Bentley Systems eB System Management Console is a system management console from Bentley Systems, USA. A security vulnerability exists in some Bentley Systems products that originated from allowing an unauthenticated attacker to view configuration options via a specially crafted request, which...

CVE-2023-51708

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For...

CVE-2023-51708

Summary: CVE-2023-51708 affects Bentley eB System Management Console (Assetwise Integrity Information Server). An unauthenticated user can view configuration options via a crafted request, causing information disclosure. Affected versions are eB System Management Console prior to 23.00.02.03 and ...

CVE-2023-50271

A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...

Hewlett Packard Enterprise System Management Homepage Security Vulnerability

The Hewlett Packard Enterprise System Management Homepage is a web-based interface for Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise System Management Homepage, which originates from an information disclosure vulnerability...