207 matches found
CVE-2021-3599
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2021-3599
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2021-3843
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2021-3719
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code...
Lenovo ThinkPad 输入验证错误漏洞
Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. An input validation error vulnerability exists in the SMI callback function used in the CSME configuration of the Lenovo ThinkPad, which can be exploited by an attacker to execute arbitrary code...
Dell Bios 输入验证错误漏洞
Dell Bios is an embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. A security vulnerability exists in Dell BIOS, which stems from a faulty input validation vulnerability in Dell BIOS that could be exploited by an attacker to obtain arbitrary code execution in SMR...
Dell Bios 输入验证错误漏洞
Dell Bios is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that stems from the Dell BIOS containing an incorrect input validation vulnerability. An attacker could exploit this vulnerability to...
Dell Bios 输入验证错误漏洞
Dell Bios is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which stems from the fact that Dell BIOS contains a faulty input validation vulnerability. An attacker could use SMI to obtain arbitrary...
Lenovo ThinkPad 输入验证错误漏洞
Lenovo ThinkPad is a portable computer from Lenovo China. An input validation error vulnerability exists in the SMI callback function used in the CSME configuration of some Lenovo laptops and ThinkPad systems, which can be exploited by an attacker to obtain data outside the scope of SMRAM...
Insyde InsydeH2O 安全特征问题漏洞
Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. insydeH2O Int15MicrosoftSmm has a security feature issue vulnerability that stems from uncontrolled input t...
CVE-2021-36323
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36325
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36283
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36283
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36342
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36343
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
Dell Inspiron Buffer Overflow Vulnerability
The Dell Inspiron 15 7579 2-in-1 Dell Inspiron is a laptop computer from Dell USA. A security vulnerability exists in the Dell Inspiron 15 7579 2-in-1 BIOS prior to version 1.31.0, which stems from the inclusion of an improper SMM communication buffer validation vulnerability. A locally...
IBM System x servers Arbitrary Code Execution Vulnerability
IBM System x servers are a server from International Business Machines Corporation IBM. An arbitrary code execution vulnerability exists in IBM System x servers that stems from a potential flaw in the SMI callback function used in older BIOS mode USB drivers that could allow arbitrary code...
CVE-2020-8332
A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected...