Lucene search
K

9 matches found

The Hacker News
The Hacker News
added 2022/06/02 1:13 p.m.27 views

Conti Leaks Reveal Ransomware Gang's Interest in Firmware-based Attacks

An analysis of leaked chats from the notorious Conti ransomware group earlier this year has revealed that the syndicate has been working on a set of firmware attack techniques that could offer a path to accessing privileged code on compromised devices. "Control over firmware gives attackers...

1AI score
Exploits0
Lenovo
Lenovo
added 2020/06/04 8:26 p.m.44 views

Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US

No description provided...

7.8CVSS5.5AI score0.00345EPSS
Exploits0
NVD
NVD
added 2019/04/10 5:29 p.m.27 views

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

3.3CVSS3.6AI score0.00239EPSS
Exploits0References1
OSV
OSV
added 2019/04/10 5:29 p.m.6 views

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers PRx. Lenovo was notified that after resuming from S3 sleep mode in various versions of BIO...

3.3CVSS5.8AI score0.00239EPSS
Exploits0References1
Lenovo
Lenovo
added 2019/04/01 9:13 p.m.70 views

SPI Protected Range Registers Affected by S3 Sleep Mode - US

Lenovo Security Advisory: LEN-26332 Potential Impact: None Severity: Low Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6156 Summary Description: In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additiona...

2.1CVSS2.1AI score0.00239EPSS
Exploits0
OSV
OSV
added 2018/07/09 7:29 p.m.5 views

CVE-2017-3197

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash...

9.8CVSS5.9AI score0.05641EPSS
Exploits1References5
Cvelist
Cvelist
added 2018/07/09 7:0 p.m.25 views

CVE-2017-3197 GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash...

9.6AI score0.05641EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2018/07/09 12:0 a.m.40 views

GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protection

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash. Recent assessment...

10CVSS3.9AI score0.05641EPSS
In wildExploits1References6
Lenovo
Lenovo
added 2017/07/13 12:0 a.m.16 views

Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - Lenovo Support US

No description provided...

6.7AI score
Exploits0
Rows per page
Query Builder