9476 matches found
CVE-2021-33076
Improper authentication in firmware for some IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2021-33076
Improper authentication in firmware for some IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2021-33076
Improper authentication in firmware for some IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Moderate: Red Hat Security Advisory: booth security update
An update for booth is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
PT-2022-25307 · Unknown · S3Resume2Pei
Name of the Vulnerable Software and Affected Versions: S3Resume2Pei affected versions not specified Description: A potential attacker can execute arbitrary code during the PEI phase, influencing subsequent boot stages. This can lead to bypassing mitigations, disclosure of physical memory contents...
PT-2024-8455 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the Linux kernel's enetc driver, which allows for the configuration of TSN features through a mix of command BD ring messages and port registers. Howeve...
PT-2022-14974 · Ami · Ami Aptio 5.X
Name of the Vulnerable Software and Affected Versions: AMI Aptio 5.x Description: This issue allows an attacker with physical access to execute arbitrary code during the DXE phase. A malicious code installed as a result of vulnerability exploitation in the DXE driver could survive across an...
CVE-2022-32872
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen...
Botched Crypto Mugging Lands Three U.K. Men in Jail
Three men in the United Kingdom were arrested this month for attempting to assault a local man and steal his virtual currencies. The incident is the latest example of how certain cybercriminal communities are increasingly turning to physical violence to settle scores and disputes. Shortly after 1...
EulerOS 2.0 SP9 : cryptsetup (EulerOS-SA-2022-2308)
According to the versions of the cryptsetup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An...
CVE-2022-38069
Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with momentary physical access to gain privileged access to any device. Privileged credential access enables the extraction of sensitive patient information or modification of device...
PT-2022-24184 · Cms8000 · Cms8000
Name of the Vulnerable Software and Affected Versions: CMS8000 devices affected versions not specified Description: The issue concerns multiple globally default credentials existing across all CMS8000 devices. If these credentials are exposed, a threat actor with momentary physical access can gai...
CVE-2022-31224
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system...
CVE-2022-31224
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system...
Design/Logic Flaw
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system...
CVE-2022-31224
Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system...
CVE-2022-31224
Dell BIOS firmware is affected by an Improper Protection Against Voltage and Clock Glitches vulnerability. A physically present attacker could trigger a fault condition to alter system behavior. The available sources identify the issue in Dell BIOS versions but do not specify affected version ran...
Apple IOS 安全漏洞
Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple IOS prior to version 16, which stems from the fact that in the iPhone 8 series and later iPhones, someone with physical access to the iOS device may be able...
Dell BIOS 安全漏洞
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, Inc. The Dell BIOS has a security vulnerability that originated from the inclusion of improper protection against voltage and clock faults, which could be exploited by an attacker with physical access to th...
