SysFuSS: System-Level Firmware Fuzzing with Selective Symbolic Execution

Firmware serves as the critical interface between hardware and software in computing systems, making any bugs or vulnerabilities particularly dangerous as they can cause catastrophic system failures. While fuzzing is a promising approach for identifying design flaws and security vulnerabilities,...

Lenovo ThinkPad 安全漏洞

Lenovo ThinkPad is a portable computer from Lenovo China. A security vulnerability exists in Lenovo ThinkPad that stems from a vulnerability that could allow a local attacker to elevate privileges by accessing the embedded UEFI shell...

PT-2024-38564 · Lenovo · Thinkpad L390 Yoga +1

Name of the Vulnerable Software and Affected Versions: ThinkPad L390 Yoga and 10w Notebook affected versions not specified Description: A potential issue was reported that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell. This could potentially be used to...

Netgear WNR614 Security Vulnerability

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. A security vulnerability exists in the Netgear WNR614 version V1.1.0.541.0.1, which stems from the presence of insecure privileges that allow an attacker to access URLs and directories embedded in the firmware v...

Dell BIOS Security Vulnerability

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS. Attackers have exploited the vulnerability to cause a denial of service on the system...

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. Dell BIOS has an input validation error vulnerability that stems from incorrect input validation. An attacker could exploit this vulnerability to modify UEFI variables...

Karonte - A Static Analysis Tool To Detect Multi-Binary Vulnerabilities In Embedded Firmware

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. Research paper We present our approach and the findings of this work in the following research paper: KARONTE: Detecting Insecure Multi-binary Interactions in Embedded Firmware PDF Nilo Redini, Aravind...

Linux Embedded Firmware Dynamic Analysis: FIRMADYNE

FIRMADYNE is an automated and scalable system for performing emulation and dynamic analysis of Linux-based embedded firmware. It includes the following components: modified kernels MIPS: v2.6.32 , ARM: v4.1 , v3.10 for instrumentation of firmware execution; a userspace NVRAM library to emulate a...