Falhas do tipo CWE-1231

3 resultados

CVE-2024-36354HIGHImproper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sysEPSS 0.2%CVE-2022-42285MEDIUMDGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, EPSS 0.2%CVE-2025-52536MEDIUMImproper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting iEPSS 0.1%