Advisories · Weakness
CWE-1274.
Every Advisory and CVE whose sources give the weakness CWE-1274, newest first.
- CVSS 4.6 Medium
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confident…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- CWE-1274
- CVSS 7.1 High
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1274
- CVSS 6.1 Medium
A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically proximate attacker to hijack the boot mechanism and gain a bootloader shell via the…
- Memory corruption
- CWE-1274
- CVSS 6.8 Medium
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker t…
- CWE-1274
- CVSS 7.5 High
Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootloader unlocked.
- CWE-1274
- CVSS 6.1 Medium
Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code
- Milesight UG65-868M-EA
- CWE-1274
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1274
- CVSS 8.4 High
Nokia ASIK AirScale: The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be…
- Nokia ASIK AirScale
- CWE-1274
- CVSS 8.4 High
Nokia ASIK AirScale: A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and…
- Nokia ASIK AirScale
- CWE-1274