653 matches found
CVE-2022-40137
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...
Buffer overflow
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code...
Information disclosure
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...
Information disclosure
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...
Information disclosure
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...
CVE-2022-40137
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code...
CVE-2022-40137
CVE-2022-40137 is a Lenovo-related issue describing a buffer overflow in the WMI SMI Handler. Multiple sources (Red Hat, NVD, CVE lists, PT-2022-25238) confirm the vulnerability could let an attacker with local access and elevated privileges execute arbitrary code. Connected documents do not prov...
CVE-2022-40136
Technical details about CVE-2022-40136 (Lenovo SMI Handler information leak) are not publicly provided in the connected documents. Monitor for updates from Lenovo/NVD/Red Hat and related advisories.
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...
CVE-2022-40135
CVE-2022-40135 concerns an information-leak in the Smart USB Protection SMI Handler affecting Lenovo devices. The vulnerability may allow a local attacker with elevated privileges to read SMM memory. The PT-2022-25236 entry confirms the issue but provides no specific affected models/versions or a...
CVE-2022-40134
CVE-2022-40134 concerns a vulnerability in the SMI Set BIOS Password SMI Handler on certain Lenovo models. The issue permits a locally privileged attacker to read SMM memory, causing potential information disclosure. Documented impact is an information leak with HIGH confidentiality impact and LO...
CVE-2022-34460
Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2022-32490
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
Input validation
Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
Stack overflow
Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM...
Input validation
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2022-32490
Dell BIOS is affected by an improper input validation vulnerability (CVE-2022-32490). A local authenticated attacker can use an SMI to gain arbitrary code execution in SMRAM. Affected component is Dell BIOS; the root cause is input validation weaknesses enabling SMI-based exploitation with high i...
CVE-2022-34401
Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter in order to gain arbitrary code execution in SMRAM...