CVE-2023-42429

Improper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to gain access to read, modify, or delete data. This can enable the hacker to increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the SBIOS system’s NVIDIA DGX A100 server stems from the transition to System Management Mode SMM due to an SMI interrupt. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete data access rights, enhance their privileges, execute arbitrary code,...

Intel BIOS Firmware CVE-2022-21198 (INTEL-SA-00688)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00688 advisory. - Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via...

Intel BIOS Firmware CVE-2022-26006 (INTEL-SA-00688)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00688 advisory. - Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-31031

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2023-31034

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that originates from incorrect input validation of the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that originates from incorrect input validation of the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

PT-2024-1193 · Intel · Intel Nuc 8 Compute Element

Name of the Vulnerable Software and Affected Versions: Intel NUC 8 Compute Element BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via...

PT-2024-1333 · Intel · Intel Nuc Bios

Name of the Vulnerable Software and Affected Versions: Intel NUC BIOS firmware versions prior to IN0048 Description: The issue is related to improper input validation in the Intel NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

Intel® NUC BIOS Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-28738 Description: Improper input validation for some Intel® NUC...

PT-2024-1332 · Intel · Intel Nuc Bios

Name of the Vulnerable Software and Affected Versions: Intel NUC BIOS firmware versions prior to JY0070 Description: The issue is related to insufficient input validation, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations: For versio...

Intel® NUC Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-42429 Description:...

Dell Client BIOS Improper Authentication (DSA-2023-342)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by a improper input validation vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to corrupt memory on the system. Note that Nessus has no...

CVE-2023-43088

Dell Client BIOS contains a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...

CVE-2023-43088

Dell Client BIOS contains a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...

CVE-2023-39251

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system...

Input validation

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system...

Design/Logic Flaw

Dell Client BIOS contains a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...