Design/Logic Flaw

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware...

CVE-2019-6171

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware...

CVE-2019-6171

CVE-2019-6171 affects older ThinkPad models where an attacker with administrative privileges or physical access can cause the Embedded Controller to accept unsigned firmware updates. Root cause is unsigned firmware update capability in the EC, enabling privilege escalation via BIOS/EC update path...

PT-2019-18002 · Lenovo · Thinkpad

Name of the Vulnerable Software and Affected Versions: ThinkPad systems affected versions not specified Description: A reported issue in certain ThinkPad systems' BIOS could allow a user with administrative privileges or physical access to update the Embedded Controller with unsigned firmware...

Lenovo Warns of ThinkPad Bugs, One Unpatched

Dozens of Lenovo’s flagship ThinkPad models are vulnerable to bugs ranging in severity from low to high. Two of the flaws are tied to industry-wide security bulletins, while a medium-severity flaw affects only Lenovo laptops but remains unpatched. The most severe of the three bugs is a...

Win10 security warning: the Super 40 Drive-in there is a security vulnerability-vulnerability warning-the black bar safety net

! In the computer, the hardware is the Software Foundation. And the drive to play the makeOSknow of hardware components and interact with the role. The driver code allows theoperating systemthe kernel and the hardware to communicate, than normal user and system administrator permissions to be...

Intel® NUC Advisory

Summary: A potential security vulnerability in the system firmware for Intel® NUC may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11140...

Driver Disaster: Over 40 Signed Drivers Can’t Pass Security Muster

LAS VEGAS – An insecure driver can be just what a hacker needs to get its foot in the door to a Windows environment. Compromised drivers are at the heart of massive security headaches ranging from recent Slingshot APT campaigns and LoJax malware. That’s why researchers at Eclypsium are sounding t...

The vulnerability of UEFI (BIOS) software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of UEFI BIOS software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

Embedded Controller Update Vulnerability - US

Lenovo Security Advisory: LEN-27764 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6171 Summary Description: A vulnerability was reported in older ThinkPad systems that could allow a user with administrative privileges or physical...

Embedded Controller Update Vulnerability - Lenovo Support US

No description provided...

The vulnerability of UEFI (BIOS) software on HP workstations allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of UEFI BIOS software on HP workstations is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information, provided that the TPM module is disabled...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in system firmware for Intel® NUC may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-11123...

CVE-2019-1880

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

Input validation

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2019-1880

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2019-1880

CVE-2019-1880 concerns the BIOS upgrade utility in Cisco UCS C-Series Rack Servers. The issue stems from insufficient validation of the BIOS firmware image file, enabling an authenticated, local attacker to run the upgrade with specific options and bypass the firmware signature-verification proce...

CVE-2019-1880 Cisco Unified Computing System BIOS Signature Bypass Vulnerability

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

Cisco Unified Computing System BIOS Signature Bypass Vulnerability

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review t...