Google Android MediaTek system management interrupt driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android MMediaTek system management interrupt driver, which can be exploited by a remote attacker to build a malicious application that can be elevated in privileg...

The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.

The vulnerability of the SMM driver in the AMI NvmeSmm microprogramming system for motherboards with Intel chipsets relates to errors in the operation of the SMI interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the flash...

The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.

The vulnerability of the SMM driver in the AMI USB-Rt microprogramming system for motherboards with Intel chips is related to errors in the operation of the SMI system interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the...

GIGABYTE BRIX Mini PCs suffer from a flawed firmware protection mechanism vulnerability

GIGABYTE is a professional motherboard manufacturer in Taiwan, GB-BSi7H-6500 and GB-BXi7-5775 are the BRIX series of mini PCs. UEFI, or Unified Extensible Firmware Interface, is a standard that describes a detailed type of interface. This interface is used to automatically load the operating syst...

S2-046 and S2-045 Remote Code Execution Vulnerabilities in AVCON6 System Management Platform of Huaping Information Technology Co.

Huaping Information Technology Co., Ltd. is a multimedia communication system and smart city solution provider. S2-046 and S2-045 remote code execution vulnerabilities exist in the AVCON6 system management platform of Huaping Information Technology Co. It allows an attacker to remotely execute...

The CIS Critical Security Controls Explained - Control 2: Inventory of Authorized and Unauthorized Software

As I mentioned in our last post, the 20 critical controls are divided into System, Network, and Application families in order to simplify analysis and implementation. This also allows partial implementation of the controls by security program developers who aren't building a program from scratch,...

Intel Processor Memory Sinkhole Vulnerability

Lenovo Security Advisory: LEN-3748 Summary: Memory Sinkhole Vulnerability Description: In August 2015 at the Black Hat security conference, researcher Chris Domas presented a vulnerability found in Intel x86 processors manufactured between 1997 and 2010 prior to the Sandy Bridge generation. Throu...

AMI BIOS SMM Code Execution Vulnerability

Lenovo Security Advisory: LEN-4710 Potential Impact: Execution of code in SMM by an attacker with administrative access Severity: Medium Scope of impact: Industry-wide Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. Software System...

CVE-2016-6449

A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial...

CVE-2016-6449

CVE-2016-6449 affects Cisco FireAMP Connector Endpoint software. It describes a local denial-of-service risk where an authenticated, local attacker can stop certain protected FireAMP system processes via the lack of proper access controls on system utilities used to troubleshoot processes. The co...

Intel Branded NUC Kits Privilege Acquisition Vulnerability

Intel Branded NUC Kits are a series of host kits for Mini computers from Intel Corporation USA. A privilege-acquisition vulnerability exists in the BIOS firmware in Intel Branded NUC Kits. A local attacker could use this vulnerability to gain access to System Management Mode and take full control...

CVE-2016-8103

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

Design/Logic Flaw

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

CVE-2016-8103

CVE-2016-8103 affects Intel Branded NUC Kits. The issue is a System Management Mode (SMM) call-out that enables a local privileged user to access SMM and take full control of the platform. Public descriptions in the NVD entry indicate local attack with high privileges and high impact on confident...

CVE-2016-8103

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

CentOS 6 / 7 : sudo (CESA-2016:2872)

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Moderate: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Intel® Branded NUC’s Vulnerable to SMM Exploit

Summary: Intel is releasing updated BIOS firmware for a privilege escalation issue. This issue affects Intel® NUC Kits listed in the affected products section below. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03653)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP System Management Homepage SetSMHData admin-group Parameter Handling RCE

The HP System Management Homepage SMH running on the remote host is affected by a remote code execution vulnerability due to an overflow condition in the modsmhconfig.so library caused by improper validation of user-supplied input when parsing the admin-group parameter supplied to the...