5675 matches found
CVE-2022-46752
Dell BIOS contains an improper authorization vulnerability. An unauthenticated physical attacker may cause a denial of service. Affected: Dell BIOS (firmware); root cause is improper authorization management. Impact: availability loss (CVSS v3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=N/I=N/A=H; base score 4....
Dell BIOS 安全漏洞
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from improper authorization management, which can lead to a denial of service on the system...
PT-2023-15013 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...
Missing Linux Kernel mitigations for 'RETbleed' hardware vulnerabilities (INTEL-SA-00702, AMD-SB-1037)
The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...
Design/Logic Flaw
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...
CVE-2023-1257 CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...
CVE-2023-1257
CVE-2023-1257 affects Moxa UC Series devices. The vulnerability arises from improper physical access control, enabling an attacker with physical access to restart the device, access BIOS, alter bootloader/command-line options, and reach the terminal to modify authentication files and create a new...
CVE-2023-1257 CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...
PT-2023-13540 · Lenovo · Lcfc Bios
Name of the Vulnerable Software and Affected Versions: LCFC BIOS affected versions not specified Description: A potential issue was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from...
Dell Client BIOS Multiple Vulnerabilities (DSA-2022-326)
The Dell BIOS on the remote device is missing a security patch and is, there, is affected by an input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable. Note that Nessus has not tested...
The vulnerability of the BIOS microprogramming software in Dell laptops allows a hacker to execute arbitrary code.
The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the BIOS microprogramming system of AMD processors allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of AMD microprocessor BIOS microprogramming systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...
The vulnerability of AMD microprocessor BIOS microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the BIOS microprogramming system of AMD processors lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the microprogramming software in Dell Embedded Box PC 3000 and Dell Edge Gateway routers allows a hacker to execute arbitrary code.
The vulnerability of the microprogramming BIOS in Dell Embedded Box PC 3000 and Dell Edge Gateway devices is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Siemens Industrial Products Intel CPUs Missing Encryption of Sensitive Data (CVE-2020-24513)
Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
K45810018: Multiple Insyde BIOS/EFI vulnerabilities
Security Advisory Description CVE-2020-5953 A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can resu...
K87351324: Intel BIOS vulnerability CVE-2021-33124
Security Advisory Description Out-of-bounds write in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-33124 Impact A local attacker logged in as a privileged user can exploit the...
K16162257: Intel BIOS vulnerability CVE-2021-0154
Security Advisory Description Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access. CVE-2021-0154 Impact A local attacker logged in as a privileged user can exploit the vulnerability...
K13070025: Intel BIOS vulnerabiilties CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-33103, and CVE-2021-33122
Security Advisory Description CVE-2021-0159 Improper input validation in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access. CVE-2021-0188 Return of pointer value outside of expected range in th...