Code injection

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code...

Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - us

Lenovo Security Advisory: LEN-15084 Potential Impact: Attacker with physical or administrative access could flash malicious BIOS code Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3754 Summary Description: Some Lenovo brand notebook systems do not have write protections...

Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - Lenovo Support US

No description provided...

PT-2018-32: Arbitrary Code Execution in NCR S1

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in NCR S1. Vulnerability in the NCR S1 Dispenser controller, related to insufficient protection of the memory write mechanism, allows unauthenticated, remote attackers to execute arbitrary code...

Google Android has an unspecified vulnerability (CNVD-2017-13246)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the eMMC write protection in Android. An attacker can exploit this vulnerability to bypass the power-on write protection...

CVE-2014-9961

In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection...

Design/Logic Flaw

In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection...

CVE-2014-9961

CVE-2014-9961 is disclosed for Android builds from CAF that use the Linux kernel, describing a vulnerability in eMMC write protection that can be exploited to bypass power-on write protection. The issue is exploitable locally (attack vector: local) with user interaction potentially required, and ...

CVE-2014-9961

In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection...

CompuLab Intense PC and MintBox 2 BIOS Privilege Vulnerability

The CompuLab Intense PC and MintBox 2 are both mini-PC devices from CompuLab Israel. the BIOS is a ROM on-chip application. A BIOS privilege vulnerability exists in CompuLab Intense PC and MintBox 2 using versions of BIOS prior to 2017-05-21, which stems from the program's failure to apply write...

CVE-2017-8083

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...

CVE-2014-9961

In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection...

The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.

The vulnerability of the SMM driver in the AMI USB-Rt microprogramming system for motherboards with Intel chips is related to errors in the operation of the SMI system interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the...

GIGABYTE BRIX UEFI firmware fails to implement write protection and is not cryptographically signed

Overview GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 and GB-BXi7-5775 platforms, versions vF6 and vF2 respectively, fails to properly set the BIOSWE, BLE, SMMBWP, and PRx bits to enforce write protection. It also is not cryptographically signed. These issues may permit an attacker to write...

CVE-2013-7461

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

Privilege escalation

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

Privilege escalation

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

CVE-2013-7461

CVE-2013-7461 concerns a write protection and execution bypass in McAfee Change Control (MCC) for Linux, affecting MCC 6.1.0 and earlier. The issue allows authenticated users to modify files that are protected by write-protection rules under specific conditions, causing partial integrity impact. ...

CVE-2013-7460

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

CVE-2013-7461

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...