CVE-2015-2890

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...

CVE-2015-2890

CVE-2015-2890 affects Dell Latitude, OptiPlex, Precision Mobile Workstation and Precision Workstation CS devices with model-dependent firmware before A21. The root cause is failure to enforce BIOS_CNTL locking protection when resuming from sleep, allowing a local attacker with console access to p...

BIOS implementations fail to properly set UEFI write protections after waking from sleep mode

Overview Multiple BIOS implementations fail to properly set write protections after waking from sleep, leading to the possibility of an arbitrary BIOS image reflash. Description According to Cornwell, Butterworth, Kovah, and Kallenberg, who reported the issue affecting certain Dell client systems...

Hacking Team Spyware preloaded with UEFI BIOS Rootkit to Hide Itself

Last Week someone just hacked the infamous Hacking Team, The Italy-based cyber weapons manufacturer and leaked a huge trove of 400GB internal data, including: Emails Hacking tools Zero-day exploits Surveillance tools Source code for Spyware A spreadsheet listing every government client with date ...

Mac computer and then the explosion of security vulnerabilities hackers can obtain device control-vulnerability warning-the black bar safety net

! Mac PC re-proof security vulnerabilities hackers can obtain device control Foreign a security researcher recently found a can control the portion of the running OS X system Mac devices for security vulnerabilities. It is reported that the vulnerability allows hackers to remotely re-write the Ma...

Apple Mac OSX Zero-Day Bug Allows Hackers to Install RootKit Malware

A zero-day software vulnerability discovered deep in the firmware of many Apple computers could allows an attacker to modify the system’s BIOS and install a rootkit, potentially gaining complete control of the victim’s Mac. The critical vulnerability, discovered by well-known OS X security...

Firmware Bug in OSX Could Allow Installation of Low-Level Rootkits

There is a vulnerability buried deep in the firmware of many Apple laptops that could allow an attacker to overwrite the machine’s BIOS and install a rootkit, gaining complete control of the Mac. The vulnerability lies in the UEFI system on some older MacBooks, and researcher Pedro Vilaca...

Multiple vulnerabilities in multiple Lenovo ThinkServer product servers

Lenovo ThinkServer RD350, RD450, RD550, RD650 and TD350 are rackmount server products from Lenovo, China. A weak encryption storage user and administrator BIOS password vulnerability exists in multiple Lenovo ThinkServer product servers. An attacker could exploit this vulnerability to crack the...

CVE-2015-3322

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

Design/Logic Flaw

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

CVE-2015-3322

Lenovo ThinkServer RD350/RD450/RD550/RD650/TD350—before BIOS firmware 1.26.0, BIOS passwords (user and admin) are stored with a legacy, weak encryption. This could allow an attacker to decrypt passwords via unspecified vectors. Affected models require upgrading to BIOS firmware version 1.26.0 (or...

CVE-2015-3322

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...

Enhanced Protection of UEFI Variables

Summary: New BIOS updates are available for Intel products, enhancing the hardening of certain UEFI variables against potential modification. Intel highly recommends that users install the updates to mitigate this exposure. Description: Intel has become aware that certain firmware implementations...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Multiple Product SMM Local Code Execution Vulnerabilities

System Management Mode SMM is the highest privilege execution mode on x86 processors. Multiple BIOS implementations allow the SMM function to call memory locations other than SMRAM. An attacker with access to physical memory first corrupts the function pointer or function called by SMM, then writ...

BIOS implementations permit unsafe SMM function calls to memory locations outside of SMRAM

Overview Multiple BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of SMRAM. Description Multiple BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of SMRAM. According to Corey Kallenber...

BIOS Rootkit Implant Debuts at CanSecWest

When the National Security Agency’s ANT division catalog of surveillance tools was disclosed among the myriad of Snowden revelations, its desire to implant malware into the BIOS of targeted machines was unquestionable. While there’s little evidence of BIOS bootkits in the wild, the ANT catalog an...

Intel UEFI EFI S3 Resume Boot Path Script Privilege Escalation (INTEL-SA-00041)

The version of the Intel UEFI BIOS on the remote host is affected by a privilege escalation vulnerability due to an error, related to handling the EFI S3 Resume Boot Path boot script, that allows bypassing firmware write protections. An attacker can exploit this to perform a reflash of the...

Intel Chipsets Local Competition Condition Security Bypass Vulnerability

Intel is the world's largest manufacturer of personal computer parts and CPUs. A competitive condition vulnerability exists in Intel chipsets that rely solely on the BIOSCNTL.BIOSWE and BIOSCNTL.BLE bits as the BIOS write lockout mechanism, allowing a local attacker to exploit the vulnerability t...

BIOS Security Updates for Multiple Issues

Summary: New BIOS updates are available for Intel products. These updates harden the implementation against malicious inputs at various stages of the boot process and runtime. Description: This update addresses issues identified in the process of resuming from a sleep state, processing data store...