Lenovo ThinkPad 权限许可和访问控制问题漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad BIOS is vulnerable to a privilege-granting and access-control issue that arises from the use of boot services in the SmmOEMInt15 SMI handler. A local attacker could bypass implemented security restrictions...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad BIOS suffers from a buffer error vulnerability that originates from a boundary error in the LenovoFlashDeviceInterface within the SMI handler. A local attacker could run a specially crafted program to trigg...

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24416

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

Dell BIOS 缓冲区错误漏洞

Dell is a company that manufactures, designs, and sells home and office computers, as well as servers, data storage devices, networking devices, etc. An arbitrary code execution vulnerability exists in Dell BIOS, which can be exploited by an authenticated attacker to execute arbitrary code during...

Dell BIOS 缓冲区错误漏洞

Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...

Dell BIOS 缓冲区错误漏洞

Dell BIOS contains an incorrect input validation vulnerability. A locally authenticated attacker could exploit this vulnerability to execute arbitrary code during SMM by using SMI...

PT-2022-1899 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by an improper input validation vulnerability in Dell BIOS, which may allow a local authenticated malicious user to gain arbitrary code execution during SMM by using a...

PT-2022-1898 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by an improper input validation vulnerability in Dell BIOS, which may allow a local authenticated malicious user to gain arbitrary code execution during SMM by using a...

CVE-2022-24420

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

PT-2022-1900 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is caused by improper input validation in the Dell BIOS, which may allow a local authenticated malicious user to exploit the vulnerability using an SMI to gain arbitrary code...

CVE-2022-24415

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24416

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2022-24421

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

CVE-2020-5953

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...

CVE-2020-5953

CVE-2020-5953 affects InsydeH2O UEFI firmware, where the System Management Interrupt (SWSMI) handler dereferences EFI_RUNTIME_SERVICES (gRT) to call GetVariable outside SMRAM, enabling code execution in SMM and privilege escalation. Impact is local and architectural, as described in multiple sour...

Insyde InsydeH2O 缓冲区错误漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware suffers from a buffer overflow vulnerability that stems from the SWSMI...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System.A security vulnerability exists in Insyde InsydeH2O. The vulnerability stems from the System Management...