simatic_field_pg_m5_firmware Archives - CVE Vulnerability

CVE-2018-3639

Sun, 26 Feb 2023 06:49:45 +0000

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

The post CVE-2018-3639 appeared first on CVE Vulnerability.

CVE-2018-3657

Sun, 26 Feb 2023 06:49:45 +0000

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.

The post CVE-2018-3657 appeared first on CVE Vulnerability.

CVE-2018-3658

Sun, 26 Feb 2023 06:49:45 +0000

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.

The post CVE-2018-3658 appeared first on CVE Vulnerability.

CVE-2018-3616

Sun, 26 Feb 2023 06:49:44 +0000

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

The post CVE-2018-3616 appeared first on CVE Vulnerability.

CVE-2020-8745

Sun, 26 Feb 2023 06:43:30 +0000

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

The post CVE-2020-8745 appeared first on CVE Vulnerability.

CVE-2020-8698

Sun, 26 Feb 2023 06:43:29 +0000

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The post CVE-2020-8698 appeared first on CVE Vulnerability.

CVE-2020-8704

Sun, 26 Feb 2023 06:43:29 +0000

Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.

The post CVE-2020-8704 appeared first on CVE Vulnerability.

CVE-2020-5953

Sun, 26 Feb 2023 06:42:32 +0000

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

The post CVE-2020-5953 appeared first on CVE Vulnerability.

CVE-2020-27339

Sun, 26 Feb 2023 06:40:19 +0000

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).

The post CVE-2020-27339 appeared first on CVE Vulnerability.

CVE-2021-42554

Thu, 23 Feb 2023 14:12:16 +0000

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

The post CVE-2021-42554 appeared first on CVE Vulnerability.