系微安全保證

最新安全公告

Security Advisory Archives

BIOS & BMC

Link
Summary
CVSS Score
INSYDE-SA-2023010DMA attacks on the IdeBusDxe shared buffer used by SMM and non-SMM code could cause TOCTOU issues which could lead to corruption of SMRAM and escalation of privileges.
7.5
Link
Summary
CVSS Score
INSYDE-SA-2023001DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could cause TOCTOU issues which could lead to corruption of SMRAM and escalation of privileges.
8.2
Link
Summary
CVSS Score
INSYDE-SA-2022065Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory.
7.2
Link
Summary
CVSS Score
INSYDE-SA-2022064Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions.
8.2
Link
Summary
CVSS Score
INSYDE-SA-2022063In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an attacker to cause SMRAM corruption and escalation of privileges.
7.5
Link
Summary
CVSS Score
INSYDE-SA-2022062Use of an untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice.
7.5
Link
Summary
CVSS Score
INSYDE-SA-2020061Incorrect pointer checks within the NvmExpressDxe driver can allow tampering with SMRAM and OS memory.
7.5
Link
Summary
CVSS Score
INSYDE-SA-2022060Incorrect pointer checks within the FwBlockServiceSmm driver can allow arbitrary RAM modifications.
7.5
Link
Summary
CVSS Score
INSYDE-SA-2022059SMI functions in AhciBusDxe use untrusted inputs leading to corruption of SMRAM.
8.2
Link
Summary
CVSS Score
INSYDE-SA-2022058In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering.
7.8
Link
Summary
CVSS Score
INSYDE-SA-2022043DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents of parameter values (a TOCTOU attack).
7.5
Link
Summary
CVSS Score
INSYDE-SA-2022057DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack.
7.8
返回主要安全公告页面