GIGABYTE BRIX UEFI firmware fails to implement write protection and is not cryptographically signed

Overview GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 and GB-BXi7-5775 platforms, versions vF6 and vF2 respectively, fails to properly set the BIOSWE, BLE, SMMBWP, and PRx bits to enforce write protection. It also is not cryptographically signed. These issues may permit an attacker to write...

Privilege escalation

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

Privilege escalation

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

CVE-2013-7461

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

CVE-2013-7461

CVE-2013-7461 concerns a write protection and execution bypass in McAfee Change Control (MCC) for Linux, affecting MCC 6.1.0 and earlier. The issue allows authenticated users to modify files that are protected by write-protection rules under specific conditions, causing partial integrity impact. ...

CVE-2013-7461

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

CVE-2013-7460

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

CVE-2013-7460: Improper Access Control

A write protection and execution bypass vulnerability in McAfee now Intel Security Application Control MAC 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions...

PT-2017-5762

Name of the Vulnerable Software and Affected Versions: McAfee Application Control versions 6.1.0 and earlier Description: A write protection and execution bypass issue allows authenticated users to modify binaries that are part of the Application Control whitelist and execute binaries under...

PT-2017-5763

Name of the Vulnerable Software and Affected Versions: McAfee Change Control versions 6.1.0 and earlier Description: A write protection and execution bypass issue allows authenticated users to modify files that are part of write protection rules under specific conditions. Recommendations: For...

CVE-2013-7461: Improper Access Control

A write protection and execution bypass vulnerability in McAfee now Intel Security Change Control MCC 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions...

Intel BIOS locking mechanism contains race condition that enables write protection bypass

Lenovo Security Advisory: LEN-2015-001 Potential Impact: Denial of Service, Elevation of Privilege Severity: Medium Summary: A race condition exists in computers using Intel chipsets that rely solely on two particular BIOS write locking mechanisms. Successful exploitation of this race condition m...

Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability

BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article:...

Lenovo ThinkPad - System Management Mode Arbitrary Code Execution

Exploit for windows platform in category local exploits Source: https://github.com/Cr4sh/ThinkPwn Lenovo ThinkPad System Management Mode arbitrary code execution exploit For more information about this project please read the following article:...

CERT found that most of the BIOS there is a security vulnerability-vulnerability warning-the black bar safety net

Carnegie Mellon University's computer Emergency Response Team-CERT today released in most of the BIOS Firmware vulnerability exists in the security Bulletin, the hacker can exploit the vulnerability to re-refresh the motherboard BIOS. In the X86 computer device to deploy a series of security...

BIOS implementations fail to properly set UEFI write protections after waking from sleep mode

Overview Multiple BIOS implementations fail to properly set write protections after waking from sleep, leading to the possibility of an arbitrary BIOS image reflash. Description According to Cornwell, Butterworth, Kovah, and Kallenberg, who reported the issue affecting certain Dell client systems...

Intel BIOS locking mechanism contains race condition that enables write protection bypass

Overview A race condition exists in Intel chipsets that rely solely on the BIOSCNTL.BIOSWE and BIOSCNTL.BLE bits as a BIOS write locking mechanism. Successful exploitation of this vulnerability may result in a bypass of this locking mechanism. Description CWE-362: Concurrent Execution using Share...

Design/Logic Flaw

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...

CVE-2007-4304

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages"...