Medium WID-SEC-2022-2349 4 CVEs

HP Computer AMD Client UEFI Firmware: Mehrere Schwachstellen

Published Dec 15, 2022 · Updated May 10, 2023 · Revision 2 · de-DE

Vendor: HP Product: Computer

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in HP Computern in der AMD Client UEFI Firmware ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.

Product

HP ist ein Hersteller u. a. von Computern.

Vulnerabilities 4

High 7.8

CVE-2021-26391

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker …

AMD AMD Radeon RX 5000 Series & PRO W5000 Series AMD Radeon RX 6000 Series & PRO W6000 Series

Nov 9, 2022
Unscored —

CVE-2020-12930

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their pri…

AMD AMD Radeon RX 5000 Series & PRO W5000 Series AMD Ryzen(TM) Embedded R1000 AMD Ryzen(TM) Embedded 5000

Nov 9, 2022
Unscored —

CVE-2020-12931

Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their …

AMD AMD Radeon RX 5000 Series & PRO W5000 Series AMD Ryzen(TM) Embedded 5000 AMD Ryzen(TM) Embedded R2000

Nov 9, 2022
Unscored —

CVE-2021-26392

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing…

AMD AMD Ryzen™Embedded V3000 AMD Ryzen™ Embedded V2000 AMD Ryzen™ Embedded 5000

Nov 9, 2022

Revision history

2023-05-10 #2
Neue Updates von HP aufgenommen
2022-12-15 #1
Initiale Fassung

References

HP Security Bulletin HPSBHF03846 vom 2023-05-11
https://support.hp.com/us-en/document/ish_8109529-8109560-16/HPSBHF03846
hp vom 2022-12-15
https://support.hp.com/us-en/document/ish_7382705-7382735-16/HPSBHF03826