CVE-2020-15780

CVE-2020-15780 – Linux kernel configfs ACPI lockdown bypass Affects: Linux kernel drivers/acpi/acpi_configfs.c prior to 5.7.7 (observed in Unity Linux advisories). Impact: Injection of malicious ACPI tables via configfs could bypass lockdown and secure boot protections. Local attacker privileges ...

Fedora 31 : fwupd (2020-ad1c74c2a1)

New upstream release - Actually reload the DFU device after upgrade has completed - Capture the dock SKU in report metadata - Correctly set the Logitech device protocol - Do not use shim for non-secure boot configurations - Ensure that the DeviceID is set for child devices - Fix an error when...

Embedded security fails in ICS

Over the last 5 years, we’ve seen an increasing use of open-source software in ICS Industrial Control Systems devices, with a move away from traditional RTOS Real Time Operating System and proprietary software. We’ve seen RTUs Remote Terminal Units, HMIs Human-Machine Interfaces and even PLCs...

Intel Thunderbolt Vulnerabilities - Lenovo Support US

No description provided...

Intel Thunderbolt Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-31390 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14630 Summary Description: Intel reported potential security vulnerabilities, requiring physical access and dedicated equipment...

Cisco IOS XE Command Injection Vulnerability (CNVD-2020-31959)

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A command injection vulnerability exists in the handling of bootloader options in Cisco IOS XE Software, which arises from insufficient validation of input information when handlin...

CVE-2020-3207

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system OS to conduct a command injection attack during device boot. This vulnerability is due to insufficien...

CVE-2020-3207

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system OS to conduct a command injection attack during device boot. This vulnerability is due to insufficien...

Command injection

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system OS to conduct a command injection attack during device boot. This vulnerability is due to insufficien...

CVE-2020-3207 Cisco IOS XE Software Command Injection Vulnerability

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system OS to conduct a command injection attack during device boot. This vulnerability is due to insufficien...

CVE-2020-3207 Cisco IOS XE Software Command Injection Vulnerability

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system OS to conduct a command injection attack during device boot. This vulnerability is due to insufficien...

SUSE-RU-2020:1238-1 Recommended update for SUSE Manager Server 4.0

This update fixes the following issues: branch-network-formula: - Handle application/efi mime type - Allow http access to saltboot directory cobbler: - Signatures file now uses 'defaultautoinstall' which fixes import problem happening with some distributions bsc1159010 - Fix for kernel and initrd...

The vulnerability of the security-monitor function in the Secure Boot protocol (part of the UEFI specification) is related to an error in the display of ssh for the root user. This vulnerability allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the security-monitor function in the Secure Boot protocol a part of the UEFI specification is related to an error in the display of ssh for the root user, when this protocol is not enabled for the user. Exploiting this vulnerability can allow a remote attacker to access...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-31593)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to bypass Secure Boot and gain root user access...

Servicing stack update for Windows Server 2012: July 12, 2016

Servicing stack update for Windows Server 2012: July 12, 2016 About this update This update fixes an issue in the Secure Boot Advanced Installer securebootai.dll to prevent it from making a system unbootable when you run the blacklisted boot manager in Windows Server 2012. How to get this update...

Servicing stack update for Windows 8.1 and Windows Server 2012 R2: July 12, 2016

Servicing stack update for Windows 8.1 and Windows Server 2012 R2: July 12, 2016 This update makes improvements for Windows 8.1 and Windows Server 2012 R2 servicing stack. Before you install this update, see the Prerequisites section. About this update On Windows 8.1 and Windows Server 2012 R2,...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

CVE-2018-21070 affects Samsung mobile devices running N(7.x) or O(8.0) on MSM8998/SDM845 chipsets. The issue is a missing Bootloader integrity check that allows bypassing Secure Boot and gaining root access. The description from multiple sources attributes the vulnerability to a bootloader integr...