PT-2025-33295 · Espec North America · Espec North America Web Controller 3

Name of the Vulnerable Software and Affected Versions: ESPEC North America Web Controller 3 versions prior to 3.3.8 Description: An attacker with physical access can gain elevated privileges due to the lack of protection for GRUB and the BIOS. Recommendations: Update ESPEC North America Web...

HPESBHF04927 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01312, Intel TDX Module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.6008-07-2025 U63 ROM Family HPE...

CVE-2025-27846

CVE-2025-27846 affects ESPEC North America Web Controller 3 prior to 3.3.8. The root cause is unprotected GRUB and BIOS, enabling an attacker with physical access to obtain elevated privileges. Impact is elevated privileges with no user interaction required. Remediation per PT-Security is to upgr...

CVE-2024-5477

A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasin...

CVE-2024-5477

A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasin...

CVE-2024-5477

CVE-2024-5477 concerns HP System BIOS on some HP PC products. The vulnerability may allow privilege escalation, arbitrary code execution, denial of service, or information disclosure via a physical attack. Key details from connected documents: affected component is the System BIOS; mitigation is ...

HP PC 安全漏洞

HP PC is a computer product from Hewlett-Packard HP in the United States. HP PC has a security vulnerability that stems from a potential issue with System BIOS that could lead to elevated privileges or information disclosure...

PT-2025-33042 · Hewlett Packard · Hp System Bios

Name of the Vulnerable Software and Affected Versions: HP System BIOS affected versions not specified Description: A security issue has been identified in the System BIOS for some HP PC products. A physical attack requiring specialized equipment and knowledge may allow for escalation of privilege...

HPESBHF04925 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.4011-08-2024 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.4011-08-2024 U63 ROM Family HPE StoreEasy 1570 Performance -...

HPESBHF04928 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to...

SUSE CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

UBUNTU-CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2025-22834

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability...

CVE-2025-22830

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

CVE-2024-38805 iSCSI Remote Memory Corruption and Denial of Service

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2024-38805

CVE-2024-38805 is an EDK2 BIOS vulnerability where a user may cause an Integer Overflow or Wraparound via network, potentially causing a denial of service. Connected advisories confirm affected EDK2 implementations across Linux distributions (Oracle Linux ELSA advisories for OL8/OL9, Ubuntu USN-7...

CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2025-22830 SmiFlash Race Condition Vulnerability

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

CVE-2025-22834 ThirdPartyVideo SetVariable Vulnerability

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability...