5885 matches found
CVE-2021-3972
CVE-2021-3972 describes a Lenovo UEFI/BIOS vulnerability where a manufacturing-time driver was not deactivated in some consumer Lenovo notebooks, allowing an attacker with elevated privileges to modify an NVRAM variable and hence change Secure Boot settings. Impact can include disabling Secure Bo...
CVE-2021-3971
CVE-2021-3971 concerns a Lenovo UEFI/BIOS issue where a driver intended for use during manufacturing was mistakenly included in production images. This could allow an attacker with elevated privileges to modify the firmware protection region by altering an NVRAM variable, enabling persistence or ...
CVE-2021-3971
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable...
CVE-2021-3970
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2021-3970
CVE-2021-3970 applies to Lenovo notebook firmware. The issue is a memory corruption in the LenovoVariable SMI Handler caused by insufficient validation, potentially allowing a local attacker with elevated privileges to execute arbitrary code in BIOS/SMM. Lenovo and advisories note affected models...
CVE-2022-22558
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...
Design/Logic Flaw
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...
CVE-2022-22558
Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...
CVE-2022-22558
CVE-2022-22558 affects Dell PowerEdge Server BIOS and Dell Precision Workstation 7910/7920 Rack BIOS. Description: an Improper SMM communication buffer verification vulnerability could allow a Local High-Privileged attacker to cause arbitrary writes or denial of service. Documents indicate this i...
The vulnerability of the SecureBackDoor driver in the microprogramming software of Lenovo laptops allows a hacker to inject malicious code into the SPI flash memory.
The vulnerability of the SecureBackDoor driver in Lenovo notebook BIOS microprograms lies in the ability to alter the protection zone of the microprogram by editing the NVRAM variable. Exploiting this vulnerability allows a hacker to inject malicious code into the SPI flash memory...
The vulnerability of the ChgBootDxeHook driver in Lenovo notebook BIOS microprogramming software allows a malicious actor to execute malicious drivers and applications during the boot process.
The vulnerability of the ChgBootDxeHook driver in Lenovo notebook BIOS microprogramming software relates to the possibility of modifying security boot settings by editing the NVRAM variable. Exploiting this vulnerability allows a hacker to execute malicious drivers and applications during the boo...
PT-2022-15526 · Dell · Dell Precision Workstation 7910 Bios +2
Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Workstation 7910 BIOS affected versions not specified Dell Precision Workstation 7920 Rack BIOS affected versions not specified Description: The issue is related to an...
The vulnerability of Lenovo Variable SMI microprogramming software in Lenovo laptops allows attackers to elevate their privileges and execute arbitrary code.
The vulnerability of Lenovo’s SMI microprogramming software for BIOS on Lenovo laptops lies in the ability to pass the physical address of a specially created buffer as a parameter to the SMI handler. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...
Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US
No description provided...
Lenovo Notebook 安全漏洞
Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo Notebook that stems from a driver error used during legacy manufacturing and was incorrectly included in the BIOS image. A local privileged user can modify the firmware protection ar...
The vulnerability of the SmmOEMInt15 SMI BIOS microprogramming processor in ThinkPad notebooks allows a hacker to execute arbitrary code with elevated privileges.
The vulnerability of the SmmOEMInt15 SMI BIOS microprogramming system for ThinkPad laptops involves bypassing established security restrictions. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...
The vulnerability of the LenovoFlashDeviceInterface interface in the System Management Interrupt (SMI) handling of the BIOS of ThinkPad notebook software allows a attacker to execute arbitrary code with elevated privileges.
The vulnerability of the LenovoFlashDeviceInterface interface in the System Management Interrupt SMI handling of BIOS microprogramming systems in ThinkPad laptops is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute...
Lenovo ThinkPad 权限许可和访问控制问题漏洞
Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad BIOS is vulnerable to a privilege-granting and access-control issue that arises from the use of boot services in the SmmOEMInt15 SMI handler. A local attacker could bypass implemented security restrictions...
Lenovo ThinkPad 缓冲区错误漏洞
Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad BIOS suffers from a buffer error vulnerability that originates from a boundary error in the LenovoFlashDeviceInterface within the SMI handler. A local attacker could run a specially crafted program to trigg...