ShadeBIOS

Shade BIOS README는 각 Pkg 폴더에 있습니다. ModuleLoaderPkg: USB 스틱에서 DXE 모듈을 로드하고 실행하는 DXE 모듈 ShadeBiosPkg: 메인 Shade BIOS 패키지 VarPrintPkg: 디버그 메시지나 상태를 UEFI 변수에 출력할 수 있게 해주는 라이브러리 저자 Kazuki Matsuo. © FFRI Security, Inc. 2025 라이선스 Apache 버전 2.0...

CVE-2025-59107

Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be...

CVE-2023-32660

Uncontrolled search path in some IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-27229

Path transversal in some IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33834

An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input used to allocate a buffer and copy memory is mishandled. This could cause memory corruption or a system crash...

Intel HDMI Firmware Update Tool 安全漏洞

Intel HDMI Firmware Update Tool is a firmware update tool from Intel Corporation USA. A security vulnerability exists in Intel HDMI Firmware Update Tool for NUC prior to version 1.79.1.1, which stems from incorrect default permissions. An attacker could exploit the vulnerability to escalate...

CVE-2022-26024

Improper access control in the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0096

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-24525

Insecure inherited permissions in firmware update tool for some IntelR NUCs may allow an authenticated user to potentially enable escalation of privilege via local access...