CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24416

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

Dell BIOS 缓冲区错误漏洞

Dell is a company that manufactures, designs, and sells home and office computers, as well as servers, data storage devices, networking devices, etc. An arbitrary code execution vulnerability exists in Dell BIOS, which can be exploited by an authenticated attacker to execute arbitrary code during...

Dell BIOS 缓冲区错误漏洞

Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...

Dell BIOS 缓冲区错误漏洞

Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...

PT-2022-1899 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by an improper input validation vulnerability in Dell BIOS, which may allow a local authenticated malicious user to gain arbitrary code execution during SMM by using a...

PT-2022-1898 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by an improper input validation vulnerability in Dell BIOS, which may allow a local authenticated malicious user to gain arbitrary code execution during SMM by using a...

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

PT-2022-1900 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by improper input validation in the Dell BIOS, which may allow a local authenticated malicious user to exploit the vulnerability using an SMI to gain arbitrary code...

CVE-2022-24416

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2020-5953

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...

CVE-2020-5953

CVE-2020-5953 affects InsydeH2O UEFI firmware, where the System Management Interrupt (SWSMI) handler dereferences EFI_RUNTIME_SERVICES (gRT) to call GetVariable outside SMRAM, enabling code execution in SMM and privilege escalation. Impact is local and architectural, as described in multiple sour...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System.A security vulnerability exists in Insyde InsydeH2O. The vulnerability stems from the System Management...

Insyde InsydeH2O 缓冲区错误漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware suffers from a buffer overflow vulnerability that stems from the SWSMI...

Vulnerabilities fixed in Dell BIOS

Two vulnerabilities have been fixed in Dell products. The vulnerabilities allow a locally authenticated malicious person potentially be able to execute arbitrary code through a System Management Interupt SMI in the System Management RAM SMRAM of the device. This portion of memory is normally only...

ASUS VivoMini/Mini PC Input Validation Error Vulnerability

The ASUS VivoMini/Mini PC is an ultra-thin compact mini PC from ASUS of Taiwan, China. The ASUS VivoMini/Mini PC suffers from an input validation error vulnerability that originates from a local attacker with system privileges who can modify the memory using a System Management Interrupt SMI, whi...

CVE-2021-36343

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Dell Bios 输入验证错误漏洞

Dell Bios is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A security vulnerability exists in Dell BIOS that stems from incorrect input validation of the software. A locally authenticated attacker could potentially exploit this vulnerability by using SMI...