EUVD-2022-28758

Malicious code in bioql PyPI...

AMD SPI Protection Privilege Escalation

The vulnerability of the Serial Peripheral Interface SPI protection function in AMD microprocessor-based software is related to insufficient protection of system data. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain additional privileges, or execute...

CVE-2022-23829

A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 kernel mode access to bypass the native System Management Mode SMM ROM protections...

CVE-2022-23829: Improper Access Control

A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 kernel mode access to bypass the native System Management Mode SMM ROM protections...

SPI Lock Bypass

Bulletin ID: AMD-SB-1041 Potential Impact: System Integrity Severity: High Summary Potential weaknesses in AMD’s SPI protection features may allow an attacker to bypass the native System Management Mode SMM ROM protections. CVE Details CVE-2022-23829 A potential weakness in AMD SPI protection...

CVE-2023-20579

A vulnerability was found in AMD hardware due to improper access control in the AMD SPI protection feature. This issue may allow a local user with Ring0 kernel mode privileged access to bypass protections, potentially resulting in loss of integrity and availability. Mitigation Mitigation for this...

CVE-2023-20579

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 kernel mode privileged access to bypass protections potentially resulting in loss of integrity and availability...

CVE-2023-20579: Improper Access Control

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 kernel mode privileged access to bypass protections potentially resulting in loss of integrity and availability...

PT-2023-14086 · Nvidia · Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: DGX A100 SBIOS affected versions not specified Description: The issue concerns a vulnerability in the Pre-EFI Initialization PEI phase, where a privileged user can disable SPI flash protection. This may lead to denial of service, escalation o...