CVE-2019-18913: Undefined Security Weakness

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges

Vulnerabilities in Dell and HP laptops could allow an attacker to access information and gain kernel privileges via the devices’ Direct Memory Access DMA capability. DMA is a processing-efficiency approach for peripherals such as PCI cards or network interface cards that, as the name suggests,...

HPSBHF03647 rev. 2 - HP Open-Chassis Pre-boot Direct Memory Access (DMA) Vulnerability

Potential Security Impact Arbitrary Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT. Reported by: Mickey Shkatov from Eclypsium, and Zoltan Harmath from Microsoft. VULNERABILITY SUMMARY A potential security vulnerability with pre-boot...

PT-2019-15529

Name of the Vulnerable Software and Affected Versions Dell XPS 13 2-in-1 7390 BIOS versions prior to 1.1.3 Description The BIOS configuration for the "Enable Thunderbolt and PCIe behind TBT pre-boot modules" setting is enabled by default, allowing a local unauthenticated attacker with physical...

CVE-2019-18579: Undefined Security Weakness

Settings for the Dell XPS 13 2-in-1 7390 BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt and PCIe behind TBT pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's...

rVMI: Perform Full System Analysis with Ease

Manual dynamic analysis is an important concept. It enables us to observe the behavior of a sophisticated malware sample or exploit by executing it in a controlled environment. The information gathered through this process is often crucial in gaining a full understanding of a sample. When...

rVMI: Perform Full System Analysis with Ease

Manual dynamic analysis is an important concept. It enables us to observe the behavior of a sophisticated malware sample or exploit by executing it in a controlled environment. The information gathered through this process is often crucial in gaining a full understanding of a sample. When...

CryptWare CryptoPro Secure Disk for Bitlocker Local Security Bypass Vulnerability

CryptWare CryptoPro Secure Disk for Bitlocker is a secure disk product from CryptWare IT Security, Germany, that centrally manages Microsoft BitLocker! disk encryption utility through its own Pre-Boot Authentication PBA feature. A local security bypass vulnerability exists in CryptWare CryptoPro...

Cisco EPC3928 Information Disclosure Vulnerability

Cisco EPC3928 is a wireless router product from Cisco USA. A security vulnerability exists in the Cisco EPC3928. A remote attacker can exploit this vulnerability by sending a request during the pre-boot process to obtain sensitive configuration and certificate information...

CVE-2015-6856

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

Authentication flaw

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

CVE-2015-6856

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

CVE-2015-6856

CVE-2015-6856 affects the Dell Pre-Boot Authentication Driver PBADRV.sys (v1.0.1.5). Reports describe an IOCTL (0x0022201c) that lets local users write to arbitrary physical memory, yielding privilege escalation. Affected platform scope includes Windows XP SP3, Windows 2003 SP2, and Windows 7, wi...

PT-2016-3725

Name of the Vulnerable Software and Affected Versions Dell Pre-Boot Authentication Driver version 1.0.1.5 Description The issue allows local users to gain privileges by writing to arbitrary physical memory locations. This is achieved via a specific IOCTL call, 0x0022201c. Recommendations For...

CVE-2015-6856: Undefined Security Weakness

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

Dell Pre-Boot Authentication Driver Arbitrary Code Execution Vulnerability

The Dell Pre-Boot Authentication PBA Driver is a Dell USA component used to authenticate users before booting a computer. An arbitrary code execution vulnerability exists in Dell PBA Driver version 1.0.1.5. A remote attacker could exploit this vulnerability to execute arbitrary code within the...

Dell Pre-Boot Authentication Driver Uncontrolled Write Vulnerability

The Dell Pre-Boot Authentication Driver PBADRV.sys contains a vulnerability that can be leveraged to enable an attacker to write arbitrary code. The 'OutputAddress' from the IOCTL call is not validated before it attempts to write to memory. The content of the write is a four-byte hex value that i...

Dell Pre-Boot Authentication Driver Uncontrolled Write to Arbitrary Address

Vulnerability Details Affected Vendor: Dell Affected Product: Pre-Boot Authentication Driver Affected Version: 1.0.1.5 Platform: Microsoft Windows XP SP3, Microsoft Windows 2003 SP2, Microsoft Windows 7 CWE Classification: CWE-20: Improper input validation Impact: Arbitrary Code Execution Attack...

Dell Authentication Driver Uncontrolled Write

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2015-008 : Dell Pre-Boot Authentication Driver Uncontrolled Write to Arbitrary Address Title: Dell Pre-Boot Authentication Driver Uncontrolled Write to Arbitrary Address Advisory ID: KL-001-2015-008 Publication Date: 2015.12.18 Publication UR...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...