Summary
Ein Angreifer kann mehrere Schwachstellen in Lenovo BIOS ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
Product
Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.
Vulnerabilities 7
-
High 8.7
BDS Module Bypass Secure Boot Advisory
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Int…
-
High 8.2
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an…
-
High 8.2
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a …
-
High 8.2
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an…
-
Medium 6.9
HDD Password leakage vulnerability
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.
-
Medium 6.0
NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out…
-
Medium 6.0
NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A s…
Revision history
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
Lenovo Security Advisory LEN-226395 vom 2026-09-08
https://support.lenovo.com/us/en/product_security/LEN-226395
-
Dell Security Advisory DSA-2026-228 vom 2026-09-09
https://www.dell.com/support/kbdoc/de-de/000466482/dsa-2026-228-security-update-for-dell-client-platform-bios-for-an-ami-bios-vulnerability