Lucene search

K

Aptio V Security Vulnerabilities

cve
cve

CVE-2022-26873

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and conf...

8.2CVSS

8.1AI Score

0.001EPSS

2022-09-20 06:15 PM
45
2
cve
cve

CVE-2022-40250

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI fl...

8.8CVSS

8.7AI Score

0.001EPSS

2022-09-20 06:15 PM
31
4
cve
cve

CVE-2022-40261

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI fl...

8.2CVSS

8.3AI Score

0.0005EPSS

2022-09-20 06:15 PM
35
4
cve
cve

CVE-2022-40262

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and conf...

8.2CVSS

8.1AI Score

0.0005EPSS

2022-09-20 06:15 PM
37
4
cve
cve

CVE-2023-34469

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality.

4.9CVSS

4.6AI Score

0.001EPSS

2023-09-12 04:15 PM
14
cve
cve

CVE-2023-34470

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.

7.8CVSS

7.4AI Score

0.0004EPSS

2023-09-12 04:15 PM
18
cve
cve

CVE-2023-39535

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.

7.8CVSS

7.4AI Score

0.0004EPSS

2023-11-14 10:15 PM
13
cve
cve

CVE-2023-39536

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.

7.8CVSS

7.4AI Score

0.0004EPSS

2023-11-14 10:15 PM
12
cve
cve

CVE-2023-39537

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.

7.8CVSS

7.4AI Score

0.0004EPSS

2023-11-14 10:15 PM
12
cve
cve

CVE-2023-39538

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

7.8CVSS

7.5AI Score

0.0004EPSS

2023-12-06 04:15 PM
45
cve
cve

CVE-2023-39539

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

7.8CVSS

7.5AI Score

0.0004EPSS

2023-12-06 04:15 PM
52