5653 matches found
CVE-2019-1615
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of digital signature...
CVE-2019-1615
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of digital signature...
Cisco NX-OS Software Image Signature Verification Vulnerability
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of digital signature...
Spectre, Google, and the Universal Read Gadget
Spectre, a seemingly never ending menace to processors, is back in the limelight once again thanks to the Universal Read Gadget. First seen at the start of 2018, Spectre emerged alongside Meltdown as a major potential threat to people’s system security. Meltdown and Spectre Meltdown targeted Inte...
Firmware Denial of Service - US
Lenovo Security Advisory: LEN-24816 Potential Impact: Denial of service Severity: Low Scope of Impact: Industry-wide Summary Description: Lenovo was notified by AMI of a vulnerability that can prevent firmware from booting when certain modifiable UEFI variables are intentionally corrupted during...
Firmware Denial of Service - Lenovo Support US
No description provided...
System firmware Can Be Erased or Corrupted After Boot - Lenovo Support US
No description provided...
System x Secure Boot Vulnerability - US
Lenovo Security Advisory: LEN-20241 Potential Impact: Booting unauthenticated code Severity: High Scope of Impact: Lenovo-only CVE Identifier: CVE-2017-3775 Summary Description: Lenovo internal testing discovered some System x server BIOS/UEFI versions that, when Secure Boot mode is enabled by a...
System x Secure Boot Vulnerability - Lenovo Support US
No description provided...
Firmware Authentication Bypass - US
Lenovo Security Advisory: LEN-23849 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: Intel has reported a potential security vulnerability allowing an attacker with physical access to bypass firmware authentication...
Intel® NUC Firmware Security Advisory
Summary: A potential security vulnerability in system firmware for Intel® NUC may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2017-3718 Description: Improper setting of device configuration in syste...
Intel DCI Policy Update - US
Lenovo Security Advisory: LEN-23611 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3652 Summary Description: Intel is releasing Direct Connect Interface DCI policy update. Existing UEFI setting restrictions for...
Intel DCI Policy Update - Lenovo Support US
No description provided...
AMI BIOS System Management Mode Vulnerability - Lenovo Support US
No description provided...
AMI BIOS System Management Mode Vulnerability - US
Lenovo Security Advisory: LEN-24238 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Industry-wide Summary Description: AMI has reported to Lenovo that the System Management Mode SMM module was not properly validating buffers in the BIOS supplied by AMI...
MCExtractor - Intel, AMD, VIA & Freescale Microcode Extraction Tool
Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD & VIA CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It can be used by end-users...
Insecure Handling of UEFI Variables - Lenovo Support US
No description provided...
Insecure Handling of UEFI Variables - US
Lenovo Security Advisory: LEN-23850 Potential Impact: Elevation of Privilege, Denial of service Severity: Medium Scope of Impact: Industry-wide Summary Description: Intel has reported to Lenovo that the BIOS reference code supplied for certain CPUs may permit an attacker to alter certain UEFI...
Missing System x Flash Memory Write Protection Lock Bit - US
Lenovo Security Advisory: LEN-24477 Potential Impact: Denial of service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9085 Summary Description: A write protection lock bit was left unset after boot on an older generation of System x server, potentially allowing an...