PT-2024-10608 · Lenovo · Lenovo Pcmanager

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager versions prior to 2.6.40.3154 Description: A vulnerability was reported that could allow an attacker to cause a system reboot. Recommendations: For versions prior to 2.6.40.3154, update to version 2.6.40.3154 or later to...

CVE-2019-6198: Improper Authentication

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges...

CVE-2019-6197: Improper Authentication

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges...

CVE-2017-3772: Improper Input Validation

A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot...

Microsoft PC Manager Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft PC Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the MSPC Manage...

Huawei PC Manager Improper Access Control Vulnerability

Huawei PC Manager is a computer management application from Huawei China. An improper access control vulnerability exists in Huawei PC Manager, which can be exploited by an attacker to cause a SMRAM disclosure...

Huawei PC Manager Access Control Error Vulnerability

Huawei PC Manager is a computer management application from Huawei China. An Access Control Error vulnerability exists in Huawei PC Manager, which stems from improper interface access control, and can be exploited by an attacker to launch a UEFI shell and cause a memory leak...

Huawei PC Manager 安全漏洞

Huawei PC Manager is a computer management application from Huawei China. A security vulnerability exists in Huawei PC Manager, which stems from improper interface access control, and can be exploited by an attacker to potentially cause a SMRAM leak...

Huawei PC Manager 安全漏洞

Huawei PC Manager is a computer management application from Huawei China. A security vulnerability exists in Huawei PC Manager, which arises from a communication buffer size that is not properly validated to be the expected size and may overlap with the starting SMRAM section, which can be...

Huawei PC Manager 安全漏洞

Huawei PC Manager is a computer management application from Huawei China. A security vulnerability exists in Huawei PC Manager that originates from a memory corruption in the SMI handler of the HddPassword SMM module, which can be exploited by an attacker to corrupt data structures stored at the...

Huawei PC Manager 安全漏洞

Huawei PC Manager is a computer management application from Huawei China. A security vulnerability exists in Huawei PC Manager that originates from a memory corruption in the SMI handler of the ThisiServicesSmm SMM module, which can be exploited by an attacker to corrupt arbitrary SMRAM memory,...

Huawei PC Manager 安全漏洞

Huawei PC Manager is a computer management application from Huawei China. An Access Control Error vulnerability exists in Huawei PC Manager, which stems from improper interface access control, and can be exploited by an attacker to launch a UEFI shell and cause a memory leak...

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations relates to its susceptibility to authentication bypass attacks. This allows attackers to execute attacks on the supply chain and execute arbitrary code at client endpoints by using a SAS token.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to execute attacks on the supply chain and execute arbitrary code at...

The vulnerability of the Windows Microsoft PC Manager software regarding maintenance, cleaning, and security operations involves an exploit that allows attackers to execute attacks on the supply chain and execute arbitrary code at client endpoints.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to execute attacks on the supply chain and execute arbitrary code at...

Microsoft PC Manager SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on Microsoft PC Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to launch a supply-chain...

PT-2023-36416 · Undefined · Undefined

Уязвимость программного средства для обслуживания, очистки и обеспечения безопасности операционных систем Windows Microsoft PC Manager связана с возможностью обхода аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, реализовать атаку на цепочку поставок и...

PT-2023-36417 · Undefined · Undefined

Уязвимость программного средства для обслуживания, очистки и обеспечения безопасности операционных систем Windows Microsoft PC Manager связана с возможностью обхода аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, реализовать атаку на цепочку поставок и...

CVE-2022-39909

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

CVE-2022-39909

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...

Authorization

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link...