CVE-2020-0587

CVE-2020-0587 is a BIOS firmware vulnerability in some Intel® Processors described in the Intel “IPU – BIOS Advisory” package. The issue is an improper conditions check in BIOS firmware that may allow a privileged, local attacker to escalate privileges. Affects multiple Intel processor families; ...

CVE-2020-0587

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-0590

CVE-2020-0590 describes improper input validation in BIOS firmware for some Intel processors, potentially allowing privilege escalation via local access for an authenticated user. Public documents identify the vulnerability and note mitigations via BIOS updates. Affected platforms span multiple I...

CVE-2020-0590

Improper input validation in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8352

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes...

Design/Logic Flaw

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes...

CVE-2020-8352

In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes...

CVE-2020-8352

CVE-2020-8352 affects Lenovo Desktop models where the BIOS Configuration Change Detection fails to detect SATA configuration changes. Documented impact is LOW (CVSS v3.1: 2.4) with a physical attack vector and no user interaction required; no exploitation details are provided in the connected sou...

CVE-2020-12321

A flaw was found in the firmware of some Intel Bluetooth devices. This may allow an unauthenticated attacker within Bluetooth range to overflow a buffer and corrupt memory leading to a crash or privilege escalation. Mitigation To mitigate these vulnerabilities on the operating system level, disab...

CVE-2020-5388

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2020-5388

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Design/Logic Flaw

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2020-5388

The CVE-2020-5388 issue affects Dell Inspiron 15 7579 2‑in‑1 BIOS versions prior to 1.31.0, with an ImpropER SMM communication buffer verification vulnerability. A locally authenticated user can potentially exploit this by issuing an SMI to achieve arbitrary code execution in SMRAM . The vulnerab...

CVE-2020-5388

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Intel® PMC Advisory

Summary: A potential security vulnerability in the Power Management Controller PMC for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0599 Description: Improper access...

2020.2 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0590 Description: Improper input...

Intel BIOS Platform Sample Code Advisory

Summary: Potential security vulnerabilities in Intel BIOS platform sample code for some Intel® Processors may allow escalation of privilege. Intel is releasing BIOS platform sample code updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8764 Description:...

HPSBHF03705 rev. 6 - BIOS November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: HP, Intel VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in Intel® Processors, BIOS Firmware...

PXEChecker for Citrix Provisioning Services

Description PXEChecker is tool designed to troubleshoot configuration and environment related issues during the PXE boot process in Citrix Provisioning Services PVS. PXEChecker has two different tests: 1. Legacy BIOS Test.- Simulates the PXE boot process and analyzes the DHCP options on the DHCP...

CVE-2020-3284

A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...