PT-2023-13528 · Intel · Intel Nuc Essential +15

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified IntelR NUC Performance Kit affected versions not specified IntelR NUC Performance Mini PC affected versions not specified IntelR NUC 8 Compute Element affected versions not specified IntelR NUC Pro K...

PT-2023-13082 · Intel · Intel Nuc Kit

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits versions prior to PY0081 Description: The issue is related to improper input validation in BIOS Firmware, which may allow a privileged user to potentially enable information disclosure or denial of service via local access...

PT-2023-13587 · Intel · Intel(R) Nuc Chaco Canyon Bios Update

Name of the Vulnerable Software and Affected Versions: IntelR NUC Chaco Canyon BIOS update software versions prior to iFlashV Windows 5.13.00.2105 Description: The issue is related to an uncontrolled search path in the BIOS update software, which may allow an authenticated user to potentially...

PT-2023-13193 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR BIOS firmware affected versions not specified Description: The issue is related to improper input validation in some IntelR BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-13320 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege v...

PT-2023-13345 · Intel · Intel Nuc Pro Kit +6

Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kits affected versions not specified IntelR NUC Performance Kits affected versions not specified IntelR NUC Performance Mini PC affected versions not specified IntelR NUC 8 Compute Element affected versions not...

CVE-2021-46792

Time-of-check Time-of-use TOCTOU in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service...

CVE-2021-46792

Time-of-check Time-of-use TOCTOU in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service...

Multi-vendor BIOS Security Vulnerabilities (May 2023) - Lenovo Support US

No description provided...

Ransomware attack on MSI led to compromised Intel Boot Guard private keys

On April 7, 2023 MSI Micro-Star International released a statement confirming a cyberattack on part of its information systems. While the statement does not reveal a lot of tangible information, this snippet is important: "MSI urges users to obtain firmware/BIOS updates only from its official...

Intel ® NUC BIOS Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC firmware may allow escalation of privilege, denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-36339 Description: Improp...

Intel 2023.2 IPU – BIOS May 2023 Security Update

Intel has informed HP of potential vulnerabilities identified in BIOS firmware for some Intel® Processors which might allow escalation of privilege and information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate t...

Intel® NUC BIOS Update Software Advisory

Summary: A potential security vulnerability in some Intel® NUC Chaco Canyon BIOS update software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38101 Description: Uncontrolled search path in...

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

The threat actors behind the ransomware attack on Taiwanese PC maker MSI last month have leaked the company's private code signing keys on their dark website. "Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem," Alex Matrosov, founder and CEO of firmware security...

HP PC BIOS August 2022 Additional Updates for Potential SMM and TOCTOU Vulnerabilities

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities. HP has...

PT-2023-7449 · Canon · I-Sensys C1127I +15

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS series versions prior to firmware Ver.11.04 Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier Color imageCLASS LBP660C Series/LBP620C Series/X LBP1127C/MF740C...

Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-12357)

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Siemens SIMATIC S7-1500 Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2020-0591)

Improper buffer restrictions in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-12360)

Out of bounds read in the firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 ...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...