Zhenyu Liu

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Out-of-Bound Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also potentially impact Confidentiality and Availability.

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also impact Confidentiality, and Availability.

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds write hits unmapped memory. It could also impact Integrity, and Availability.

Um limite de memória não validado no código desenvolvido para projetos HP permite a execução de código arbitrário. Especificamente, existe uma gravação fora dos limites no módulo `H19WMIHandlerSmm` (GUID f1946499-571b-44c3-9b9c-cc55210b0c02). Um invasor com privilégios de kernel local pode disparar um SMI (System Management Interrupt) de software, que é uma interrupção de alta prioridade que suspende todas as outras atividades do sistema para executar código no Modo de Gerenciamento do Sistema (SMM). Isso permite uma escalada de privilégios do ring 0 (kernel) para o ring -2 (SMM), possibilitando gravações arbitrárias na memória física, incluindo a SMRAM. Isso pode levar à implantação de um rootkit SMM persistente que ignora o Secure Boot e sobrevive à reinstalação do sistema operacional.