Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - Lenovo Support US

No description provided...

Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - us

Lenovo Security Advisory: LEN-9458 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity: Medium Scope of Impact: Lenovo-specific Summary Description: Toshiba’s firmware used to erase the data on the following SSDs did not meet Lenovo’s...

HP ThinkPwn UEFI BIOS 'SmmRuntime' Remote Privilege Elevation Vulnerability

HP ThinkPwn UEFI BIOS is a device from Hewlett-Packard HP in the United States. The HP ThinkPwn UEFI BIOS 'SmmRuntime' suffers from a remote elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code with elevated privileges and perform unauthorized...

openSUSE Security Update : virtualbox (openSUSE-2016-1226)

This update for virtualbox fixes the following issues : - Address CVE-2016-5501, CVE-2016-5538, CVE-2016-5605, CVE-2016-5608, CVE-2016-5610, CVE-2016-5611, CVE-2016-5613 boo1005621. - Reduce memory needs during build. - Version bump to 5.0.28 released 2016-10-18 by Oracle This is a maintenance...

Increased Use of WMI for Environment Detection and Evasion

Introduction Throughout the past few months, FireEye Labs has observed an increased use of Windows Management Instrumentation WMI queries for environment detection and evasion of dynamic analysis and virtualization engines. WMI provides high-level interaction with Windows objects using C/C++,...

Increased Use of WMI for Environment Detection and Evasion

Introduction Throughout the past few months, FireEye Labs has observed an increased use of Windows Management Instrumentation WMI queries for environment detection and evasion of dynamic analysis and virtualization engines. WMI provides high-level interaction with Windows objects using C/C++,...

PT-2016-37: Information Disclosure in Intel

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Intel. Vulnerability in BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors allows attackers with physical access to the system to obtain sensitive information. How to f...

PT-2016-38: Information Disclosure in Intel

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Intel. Vulnerability in BIOS in Intel NUC systems based on 6th Gen Intel Core processors allows attackers with physical access to the system to obtain sensitive information. How to fix Update...

SmmRuntime Escalation of Privilege

Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects the UEFI BIOS of select Intel Products. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious attacker with local administrati...

CVE-2016-5247

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate...

Design/Logic Flaw

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate...

CVE-2016-5247

The CVE-2016-5247 issue concerns Lenovo systems (ThinkCentre M-series, ThinkServer TS/RS, ThinkStation E32/P300/P310, among others) where AMI BIOS test keys could allow local or physically proximate attackers to bypass Secure Boot. The Lenovo advisory LEN-7806 notes a test certificate/key was mis...

CVE-2016-5247

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate...

The vulnerability of the Windows operating system allows a hacker to intercept network traffic or bypass the Enhanced Protected Mode (EPM) or application’s security mechanisms. As a result, unauthorized content can be displayed in the browser.

The vulnerability of the Windows operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to intercept network traffic or bypass the Enhanced Protected Mode EPM or application security mechanisms. As a result, unauthorized content can be...

Intel releases fix for sleep mode configuration bypass - Lenovo Support US

No description provided...

BIOS EFI Driver SMM Code Execution Vulnerability - my

Lenovo Security Advisory: LEN-4901 Potential Impact: Execution of code in SMM by an attacker with local administrative access Severity: Medium Scope of Impact: Lenovo specific Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. A vulnerabili...

Intel releases fix for sleep mode configuration bypass

Lenovo Security Advisory: LEN-2015-049, LEN-2015-050, LEN-2015-051 Potential Impact: Elevation of Privilege Severity: High Summary: Intel has released an update that has been incorporated into the latest Lenovo BIOS to fix vulnerabilities dealing with systems going into sleep mode. Description:...

BIOS EFI Driver SMM Code Execution Vulnerability - Lenovo Support MY

No description provided...

Accessing data on Self-Encrypting drives while a system is in sleep state

Lenovo Security Advisory: LEN-2910 Potential Impact: Physical access of encrypted data Severity: Informational Summary: At the BlackHat Europe 2015 conference, KPMG disclosed an industry-wide vulnerability affecting hard disk drives that employ hardware-based Full Disk Encryption FDE. These drive...

Lenovo Service Engine (LSE) BIOS for Desktop

Lenovo Security Advisory: LEN-2015-077 Potential Impact: Limited use of system resources Severity: Low Summary: Lenovo has released a utility to remove files configured by Lenovo Service Engine LSE on desktop systems running Windows 8 and 8.1 to follow updated security guidelines from Microsoft...