Security Bulletin: This Power System update is being released to address CVE-2022-22374

Summary POWER9: In response to a security issue with firmware update, this security bulletin is being issued to address Common Vulnerabilities and Exposures issue number CVE 2022-22374. There is no Power System firmware update for this. Please follow the Remediation and Mitigation steps...

The vulnerability of BIOS microprogramming software in Dell laptops arises from an operation that goes beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of BIOS microprogramming software in Dell laptops, related to the execution of operations beyond buffer boundaries in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

IBM Power System安全漏洞

IBM Power System is a Power processor-based server computer from IBM U.S.A. The Power System firmware has a security vulnerability that could be exploited by an attacker to gain access to sensitive information using man-in-the-middle techniques...

Security Bulletin: This Power System update is being released to address CVE 2020-25705

Summary POWER9: In response to security issues with BMC's UDP network service, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2020-25705. Vulnerability Details CVEID: CVE-2020-25705 DESCRIPTION: Linux Kernel could allow a remo...

Lenovo ThinkPad 安全漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The ThinkPad suffers from a security vulnerability that stems from the fact that when the Enhanced Biometrics setting is enabled in the BIOS, the vulnerability could cause the system to crash...

NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2021-0180)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ovmf packages installed that are affected by multiple vulnerabilities: - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi...

Dell BIOS 信任管理问题漏洞

BIOS is an acronym that stands for Basic Input Output System. Also known as "system setup", BIOS is the embedded software inside a small memory chip on the motherboard of a computer. This chip is called a complementary metal oxide semiconductor CMOS. The Dell BIOS is vulnerable to trust managemen...

CVE-2021-0067

Improper access control in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0054: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. The Intel NUC suffers from a security vulnerability that stems from incorrect access controls in the program's system firmware that could allow a privileged user to escalate privileges through local access...

Intel NUC 缓冲区错误漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC that stems from an improper buffer restriction in the program's system firmware that could allow a privileged user to achieve privileged upgrades via local access...

CVE-2021-20719

RFNTPS firmware versions System01000004 and earlier, and Web01000004 and earlier allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors...

PT-2021-7226 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an unintended intermediary in the BIOS authenticated code module for some IntelR Processors. This may allow a privileged user to potentially enable...

Samsung SMR has an unspecified vulnerability

Samsung SMR is a system firmware from Samsung South Korea. It provides storage for system applications. A security vulnerability exists in SMR Mar-2021 Release 1, which stems from the fact that an incorrect implementation handles file descriptors that can lead to memory corruption, resulting in...

Unspecified Vulnerability in Samsung SMR (CNVD-2021-30501)

Samsung SMR is a system firmware from Samsung South Korea. It provides storage for system applications. A security vulnerability exists in SMR Mar-2021 Release 1 that allows an attacker to load arbitrary ELF libraries in the DSP. No details of the vulnerability are provided at this time...

SAMSUNG Mobile devices 安全漏洞

Samsung SMR is a system firmware from Samsung South Korea. It provides storage for system applications. A security vulnerability exists in SMR MAR-2021 Release 1, which stems from an improper access control vulnerability that exposes sensitive kernel information to user space. No detailed...

The vulnerability of the potentially dangerous function of Intel processor BIOS microprogramming software, which allows a hacker to enhance their privileges

The vulnerability of the potentially dangerous function of Intel processor BIOS microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel® PMC Advisory - Lenovo Support US

No description provided...

System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US

Lenovo Security Advisory: LEN-38625 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8332 Summary Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and...