9 matches found
CVE-2024-31719----AMI-Aptio-5-Vulnerability
AMI-Aptio--NvLock-Vulnerability 信息 CVE 编号: CVE-2024-31719 链接 漏洞类型: 不正确的访问控制 产品供应商: American Megatrends International, LLC. 产品: AMI Aptio - 5 攻击类型: 本地 攻击向量 攻击者可以轻松绕过 NvLock 模块对 NVRAM 的访问保护。 一旦保护被绕过，就可以轻松修改存储在 NVRAM 中的所有变量，包括管理员密码。 PoC...
EUVD-2022-42807
Malicious code in bioql PyPI...
EUVD-2023-12296
Malicious code in bioql PyPI...
CVE-2025-3052
An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability...
CVE-2022-3431
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...
PT-2025-20696
Name of the Vulnerable Software and Affected Versions: Microsoft UEFI firmware versions prior to June 2025. Description: A vulnerability exists in Microsoft-signed UEFI firmware that allows for the execution of untrusted software due to an arbitrary write flaw. This allows an attacker to control...
Design/Logic Flaw
NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service...
CVE-2023-0207
NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service...
Lenovo Notebook 安全漏洞
Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo Notebook that stems from a driver error used during legacy manufacturing and was incorrectly included in the BIOS image. A local privileged user can modify the firmware protection ar...