Vul_Pwner

Name of the Vulnerable Software and Affected Versions: Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to improper input validation in the BIOS and firmware update software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could be exploited by an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel CIP software versions prior to 2.4.10852 Description: The issue is related to improper input validation in Intel CIP software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges. Recommendations: For versions prior to 2.4.10852, update to version 2.4.10852 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

The issue exists due to improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware. This may allow a privileged user to potentially enable escalation of privilege via local access.

An arbitrary memory write vulnerability was discovered, which may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The issue is related to a buffer overflow in the BMC controller's firmware.

The issue is related to an arbitrary memory write vulnerability in the BIOS firmware of certain Supermicro motherboards. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information.

A vulnerability was discovered in the SMM callout component of Supermicro BMC controller firmware, related to a buffer overflow in memory. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

The issue is related to improper input validation in the PlatformVariableInitDxe driver in UEFI firmware, which may allow a privileged user to enable escalation of privilege via local access.

The issue is related to improper input validation in the PfrSmiUpdateFw driver in UEFI firmware, which may allow a privileged user to enable escalation of privilege via local access. This could potentially lead to local attacks.

The issue is related to improper input validation in the UserAuthenticationSmm driver in UEFI firmware, which may allow a privileged user to enable escalation of privilege via local access.