5670 matches found
CVE-2021-3453
CVE-2021-3453 affects Lenovo Notebook, ThinkPad, and Lenovo Desktop BIOS modules that are not protected by Intel Boot Guard, allowing a physically proximate attacker to write to the SPI flash storage. The issue stems from BIOS modules being unprotected by Boot Guard, enabling potential unauthoriz...
Lenovo BIOS Vulnerabilities (July 2021) - Lenovo Support US
No description provided...
Intel BIOS Shared SW Architecture 授权问题漏洞
Intel BIOS Shared SW Architecture Intel BSSA is a BIOS shared software architecture from Intel Corporation. An authorization issue vulnerability exists in the Intel BIOS Shared SW Architecture due to an elevation of privilege vulnerability in the build time configuration of the Shared SW...
Lenovo BIOS 安全漏洞
Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. A security vulnerability exists in the Lenovo BIOS that stems from a lack of authentication measures in the system, which could allow an attacker to elevate...
多款 Lenovo 设备 安全漏洞
Lenovo Desktops and Lenovo ThinkPad are both products of the Chinese company Lenovo.Lenovo Desktops are desktop computersLenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPa...
Intel BSSA DFT Advisory
Summary: A potential security vulnerability in the customer build time configuration for the Intel BIOS Shared SW Architecture BSSA Design for Test DFT feature may allow escalation of privilege. Intel is releasing detailed guidance to address this potential vulnerability. Vulnerability Details:...
Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10035)
Insyde H2OFFT is a set of tools for BIOS firmware development from Insyde Software Taiwan, China.Insyde InsydeH2O has a security vulnerability that could be exploited by attackers to gain control of the system via system administration mode privileges...
Debian: Security Advisory (DSA-4934-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4934-1] intel-microcode security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4934-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 26, 2021 https://www.debian.org/security/faq -...
CVE-2021-21574
Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions...
CVE-2021-21571
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service an...
Input validation
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service an...
CVE-2021-21571
CVE-2021-21571 concerns the Dell BIOSConnect/HTTPS Boot stack in Dell UEFI BIOS. The vulnerability is due to improper certificate validation in the BIOSConnect HTTPS path, enabling a MITM attacker to remotely deliver content and potentially cause denial of service and payload tampering. Affected ...
CVE-2021-21571
Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service an...
30M Dell Devices at Risk for Remote BIOS Attacks, RCE
UPDATE A high-severity series of four vulnerabilities can allow remote adversaries to gain arbitrary code execution in the pre-boot environment on Dell devices, researchers said. They affect an estimated 30 million individual Dell endpoints worldwide. According to an analysis from Eclypsium, the...
Fixed vulnerabilities in Dell boot functionality.
Eclypsium has discovered vulnerabilities in Dell SupportAssist for Windows. The vulnerabilities allow an unauthenticated remote malicious person able to execute arbitrary code in the BIOS before the operating system is booted. The malicious must perform a man-in-the-middle attack to do so and...
Intel Server Board M10JNP2SB Advisory (INTEL-SA-00474)
The version of the Intel BIOS on the remote device is affected by multiple vulnerabilities, as follows: - Buffer overflow in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of...
Dell PowerEdge Buffer Overflow Vulnerability
Dell PowerEdge Server BIOS is a system update driver from Dell, a security vulnerability in Dell PowerEdge that could be exploited by attackers to cause a denial of service, execute arbitrary code, or compromise information in a UEFI or BIOS pre-boot environment...
Dell PowerEdge Buffer Overflow Vulnerability
Dell PowerEdge Server BIOS is a system update driver from Dell Dell. A security vulnerability exists in Dell PowerEdge, which can be exploited by an attacker to cause a denial of service, arbitrary code execution, or information disclosure in a UEFI or BIOS pre-boot environment...
CVE-2021-21554
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploi...