Kategori: Güvenlik Açıkları

CVE-2020-21639

Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule_name parameter. This vulnerability allows attackers to execute arbitrary…

Devamını oku

CVE-2020-12946 (epyc_7232p_firmware, epyc_7252_firmware, epyc_7262_firmware, epyc_7272_firmware, epyc_7282_firmware, epyc_72f3_firmware, epyc_7302_firmware, epyc_7302p_firmware, epyc_7313_firmware, epyc_7313p_firmware, epyc_7343_firmware, epyc_7352_firmware, epyc_73f3_firmware, epyc_7402_firmware, epyc_7402p_firmware, epyc_7413_firmware, epyc_7443_firmware, epyc_7443p_firmware, epyc_7452_firmware, epyc_7453_firmware, epyc_74f3_firmware, epyc_7502_firmware, epyc_7502p_firmware, epyc_7513_firmware, epyc_7532_firmware, epyc_7542_firmware, epyc_7543_firmware, epyc_7543p_firmware, epyc_7552_firmware, epyc_75f3_firmware, epyc_7642_firmware, epyc_7643_firmware, epyc_7662_firmware, epyc_7663_firmware, epyc_7702_firmware, epyc_7702p_firmware, epyc_7713_firmware, epyc_7713p_firmware, epyc_7742_firmware, epyc_7763_firmware, epyc_7f32_firmware, epyc_7f52_firmware, epyc_7f72_firmware, epyc_7h12_firmware)

Insufficient input validation in PSP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service. Devamını Oku

Devamını oku

CVE-2020-12951 (epyc_7001_firmware, epyc_7002_firmware, epyc_7003_firmware, epyc_7232p_firmware, epyc_7251_firmware, epyc_7252_firmware, epyc_7262_firmware, epyc_7272_firmware, epyc_7281_firmware, epyc_7282_firmware, epyc_72f3_firmware, epyc_7301_firmware, epyc_7302_firmware, epyc_7302p_firmware, epyc_7313_firmware, epyc_7313p_firmware, epyc_7343_firmware, epyc_7351_firmware, epyc_7351p_firmware, epyc_7352_firmware, epyc_73f3_firmware, epyc_7401_firmware, epyc_7401p_firmware, epyc_7402_firmware, epyc_7402p_firmware, epyc_7413_firmware, epyc_7443_firmware, epyc_7443p_firmware, epyc_7451_firmware, epyc_7452_firmware, epyc_7453_firmware, epyc_74f3_firmware, epyc_7501_firmware, epyc_7502_firmware, epyc_7502p_firmware, epyc_7513_firmware, epyc_7532_firmware, epyc_7542_firmware, epyc_7543_firmware, epyc_7543p_firmware, epyc_7551_firmware, epyc_7551p_firmware, epyc_7552_firmware, epyc_75f3_firmware, epyc_7601_firmware, epyc_7642_firmware, epyc_7643_firmware, epyc_7662_firmware, epyc_7663_firmware, epyc_7702_firmware, epyc_7702p_firmware, epyc_7713_firmware, epyc_7713p_firmware, epyc_7742_firmware, epyc_7763_firmware, epyc_7f32_firmware, epyc_7f52_firmware, epyc_7f72_firmware)

Race condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations. Devamını Oku

Devamını oku

CVE-2020-12954 (epyc_7001_firmware, epyc_7002_firmware, epyc_7003_firmware, epyc_7232p_firmware, epyc_7251_firmware, epyc_7252_firmware, epyc_7262_firmware, epyc_7272_firmware, epyc_7281_firmware, epyc_7282_firmware, epyc_72f3_firmware, epyc_7301_firmware, epyc_7302_firmware, epyc_7302p_firmware, epyc_7313_firmware, epyc_7313p_firmware, epyc_7343_firmware, epyc_7351_firmware, epyc_7351p_firmware, epyc_7352_firmware, epyc_73f3_firmware, epyc_7401_firmware, epyc_7401p_firmware, epyc_7402_firmware, epyc_7402p_firmware, epyc_7413_firmware, epyc_7443_firmware, epyc_7443p_firmware, epyc_7451_firmware, epyc_7452_firmware, epyc_7453_firmware, epyc_74f3_firmware, epyc_7501_firmware, epyc_7502_firmware, epyc_7502p_firmware, epyc_7513_firmware, epyc_7532_firmware, epyc_7542_firmware, epyc_7543_firmware, epyc_7543p_firmware, epyc_7551_firmware, epyc_7551p_firmware, epyc_7552_firmware, epyc_75f3_firmware, epyc_7601_firmware, epyc_7642_firmware, epyc_7643_firmware, epyc_7662_firmware, epyc_7663_firmware, epyc_7702_firmware, epyc_7702p_firmware, epyc_7713_firmware, epyc_7713p_firmware, epyc_7742_firmware, epyc_7763_firmware, epyc_7f32_firmware, epyc_7f52_firmware, epyc_7f72_firmware)

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI…

Devamını oku

CVE-2020-12944 (epyc_7232p_firmware, epyc_7251_firmware, epyc_7252_firmware, epyc_7261_firmware, epyc_7262_firmware, epyc_7272_firmware, epyc_7281_firmware, epyc_7282_firmware, epyc_72f3_firmware, epyc_7301_firmware, epyc_7302_firmware, epyc_7302p_firmware, epyc_7313_firmware, epyc_7313p_firmware, epyc_7343_firmware, epyc_7351_firmware, epyc_7351p_firmware, epyc_7352_firmware, epyc_7371_firmware, epyc_73f3_firmware, epyc_7401_firmware, epyc_7402_firmware, epyc_7402p_firmware, epyc_7413_firmware, epyc_7443_firmware, epyc_7443p_firmware, epyc_7451_firmware, epyc_7452_firmware, epyc_7453_firmware, epyc_74f3_firmware, epyc_7501_firmware, epyc_7502_firmware, epyc_7502p_firmware, epyc_7513_firmware, epyc_7532_firmware, epyc_7542_firmware, epyc_7543_firmware, epyc_7543p_firmware, epyc_7551_firmware, epyc_7551p_firmware, epyc_7552_firmware, epyc_75f3_firmware, epyc_7601_firmware, epyc_7642_firmware, epyc_7643_firmware, epyc_7662_firmware, epyc_7663_firmware, epyc_7702_firmware, epyc_7702p_firmware, epyc_7713_firmware, epyc_7713p_firmware, epyc_7742_firmware, epyc_7763_firmware, epyc_7f32_firmware, epyc_7f52_firmware, epyc_7f72_firmware, epyc_7h12_firmware)

Insufficient validation of BIOS image length by PSP Firmware could lead to arbitrary code execution. Devamını Oku

Devamını oku

CVE-2020-12961 (epyc_7002_firmware, epyc_7003_firmware, epyc_7232p_firmware, epyc_7252_firmware, epyc_7262_firmware, epyc_7272_firmware, epyc_7282_firmware, epyc_72f3_firmware, epyc_7302_firmware, epyc_7302p_firmware, epyc_7313_firmware, epyc_7313p_firmware, epyc_7343_firmware, epyc_7352_firmware, epyc_73f3_firmware, epyc_7402_firmware, epyc_7402p_firmware, epyc_7413_firmware, epyc_7443_firmware, epyc_7443p_firmware, epyc_7452_firmware, epyc_7453_firmware, epyc_74f3_firmware, epyc_7502_firmware, epyc_7502p_firmware, epyc_7513_firmware, epyc_7532_firmware, epyc_7542_firmware, epyc_7543_firmware, epyc_7543p_firmware, epyc_7552_firmware, epyc_75f3_firmware, epyc_7642_firmware, epyc_7643_firmware, epyc_7662_firmware, epyc_7663_firmware, epyc_7702_firmware, epyc_7702p_firmware, epyc_7713_firmware, epyc_7713p_firmware, epyc_7742_firmware, epyc_7763_firmware, epyc_7f32_firmware, epyc_7f52_firmware, epyc_7f72_firmware)

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network…

Devamını oku