CVE-2021-3972

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

CVE-2021-3970

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code...

Code injection

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code...

Design/Logic Flaw

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

Design/Logic Flaw

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable...

Input validation

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-4212

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-4212

CVE-2021-4212 describes a local-privilege escalation vulnerability in the SMI callback function used by the Legacy BIOS mode driver on some Lenovo Notebook models. The issue could allow an attacker with local access and elevated privileges to execute arbitrary code. The affected component is the ...

CVE-2021-3972

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

CVE-2021-3972

CVE-2021-3972 describes a Lenovo UEFI/BIOS vulnerability where a manufacturing-time driver was not deactivated in some consumer Lenovo notebooks, allowing an attacker with elevated privileges to modify an NVRAM variable and hence change Secure Boot settings. Impact can include disabling Secure Bo...

CVE-2021-3971

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable...

CVE-2021-3971

CVE-2021-3971 concerns a Lenovo UEFI/BIOS issue where a driver intended for use during manufacturing was mistakenly included in production images. This could allow an attacker with elevated privileges to modify the firmware protection region by altering an NVRAM variable, enabling persistence or ...

CVE-2021-3970

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3970

CVE-2021-3970 applies to Lenovo notebook firmware. The issue is a memory corruption in the LenovoVariable SMI Handler caused by insufficient validation, potentially allowing a local attacker with elevated privileges to execute arbitrary code in BIOS/SMM. Lenovo and advisories note affected models...

CVE-2022-22558

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

Design/Logic Flaw

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

CVE-2022-22558

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

CVE-2022-22558

CVE-2022-22558 affects Dell PowerEdge Server BIOS and Dell Precision Workstation 7910/7920 Rack BIOS. Description: an Improper SMM communication buffer verification vulnerability could allow a Local High-Privileged attacker to cause arbitrary writes or denial of service. Documents indicate this i...

PT-2022-15526 · Dell · Dell Precision Workstation 7910 Bios +2

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Workstation 7910 BIOS affected versions not specified Dell Precision Workstation 7920 Rack BIOS affected versions not specified Description: The issue is related to an...

The vulnerability of the SecureBackDoor driver in the microprogramming software of Lenovo laptops allows a hacker to inject malicious code into the SPI flash memory.

The vulnerability of the SecureBackDoor driver in Lenovo notebook BIOS microprograms lies in the ability to alter the protection zone of the microprogram by editing the NVRAM variable. Exploiting this vulnerability allows a hacker to inject malicious code into the SPI flash memory...