CVE-2021-3719

CVE-2021-3719 concerns a vulnerability in the SMI callback that handles boot script tables for resuming from sleep state on Lenovo ThinkCentre and ThinkStation desktops/workstations. The issue could let an attacker with local access and elevated privileges execute arbitrary code by exploiting the...

CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3599

Technical details (affected product/version, root cause, and remediation) are not publicly available in the provided documents for CVE-2021-3599. Monitor for updates.

PT-2021-21565 · Lenovo · Lenovo Thinkstation +1

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkCentre and ThinkStation models affected versions not specified Description: A potential issue in the SMI callback function that handles boot script tables for resuming from sleep state may allow an attacker with local access and...

CVE-2021-36325: Improper Input Validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-36324: Improper Input Validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-3719: Improper Input Validation

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3843: Improper Input Validation

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-36323: Improper Input Validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

PT-2021-21225

Name of the Vulnerable Software and Affected Versions Dell BIOS affected versions not specified Description The issue is related to an improper input validation vulnerability in Dell BIOS. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain...

PT-2021-22123

Name of the Vulnerable Software and Affected Versions ThinkPad models affected versions not specified Description A potential issue in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Recommendatio...

PT-2021-21891

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook and ThinkPad systems affected versions not specified Description: A potential issue in the SMI callback function used in CSME configuration could be used to leak out data out of the SMRAM range. Recommendations: At the moment,...

PT-2021-21226

Name of the Vulnerable Software and Affected Versions Dell BIOS affected versions not specified Description The issue is related to an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code...

CVE-2021-3786: Improper Input Validation

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range...

CVE-2021-3599: Improper Input Validation

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

PT-2021-21227

Name of the Vulnerable Software and Affected Versions Dell BIOS affected versions not specified Description The issue is related to an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code...

PT-2021-21096

Name of the Vulnerable Software and Affected Versions: ThinkPad models affected versions not specified Description: A potential issue in the SMI callback function used to access flash devices in some ThinkPad models may allow an attacker with local access and elevated privileges to execute...

Insyde InsydeH2O Security Feature Issue Vulnerability

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. insydeH2O Int15MicrosoftSmm has a security feature issue vulnerability that stems from uncontrolled input t...

Input validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-36283

CVE-2021-36283 concerns Dell BIOS with an improper input validation vulnerability. The issue enables a local authenticated attacker to use a System Management Interrupt (SMI) to execute arbitrary code in SMRAM. Affected software is Dell BIOS; root cause is insufficient input validation within the...