deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-36383
Published: 2024-05-27
Description: An issue was discovered in Logpoint SAML Authentication before 6.0.3. An attacker can place a crafted filename in the state field of a SAML SSO-URL response, and the file corresponding to this filename will ultimately be deleted. This can lead to a SAML Authentication login outage.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-706
References: https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]621-Arbitrary-file-deletion-through-URL-Injection-to-SAML-SSO-URL-Response; https://servicedesk.logpoint.com/hc/en-us/articles/[PII_REDACTED]621-Arbitrary-file-deletion-through-URL-Injection-to-SAML-SSO-URL-Response
CVE: CVE-2023-6349
Published: 2024-05-27
Description: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.
We recommend upgrading to version 1.13.1 or above
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://crbug.com/webm/1642; https://crbug.com/webm/1642
CVE: CVE-2024-5405
Published: 2024-05-27
Description: A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via /tools/redis.php page in the k, hash, key and p parameters. This vulnerability could allow a remote user to submit a specially crafted JavaScript payload for an authenticated user to retrieve their session details.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-winnmp-wtriple; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-winnmp-wtriple
CVE: CVE-2024-5406
Published: 2024-05-27
Description: A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via index page in from, subject, text and hash parameters. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their session details.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-winnmp-wtriple; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-winnmp-wtriple
CVE: CVE-2024-3381
Published: 2024-05-27
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-5407
Published: 2024-05-27
Description: A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94
References: https://github.com/josepsanzcamp/RhinOS; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rhinos-saltos; https://github.com/josepsanzcamp/RhinOS
CVE: CVE-2024-5408
Published: 2024-05-27
Description: Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a victim's user session by submitting a specially crafted URL.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/josepsanzcamp/RhinOS; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rhinos-saltos; https://github.com/josepsanzcamp/RhinOS
CVE: CVE-2024-5409
Published: 2024-05-27
Description: RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to a victim to obtain their session details.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/josepsanzcamp/RhinOS; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rhinos-saltos; https://github.com/josepsanzcamp/RhinOS
CVE: CVE-2023-50977
Published: 2024-05-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability. See also CVE-2024-36472.
CVE: CVE-2024-34477
Published: 2024-05-27
Description: configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In addition, the SUID bit must be added to this file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://blog.hackvens.fr/advisories/CVE-2024-34477-Fogproject.html; https://forums.fogproject.org/topic/17486/fog-1-5-10-and-earlier-nfs-privilege-escalation-vulnerability; https://github.com/FOGProject/fogproject/blob/a4bb1bf39ac53c3cbe623576915fbc3b5c80a00f/lib/common/functions.sh#L1360
CVE: CVE-2024-0851
Published: 2024-05-27
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection.This issue affects Smartpower: through V24.05.27.
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0556; https://www.usom.gov.tr/bildirim/tr-24-0556
CVE: CVE-2024-32978
Published: 2024-05-27
Description: Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified in the Kaminari pagination library for Ruby on Rails, concerning insecure file permissions. This vulnerability is of moderate severity due to the potential for unauthorized write access to particular Ruby files managed by the library. Such access could lead to the alteration of application behavior or data integrity issues. Users of affected versions are advised to update to Kaminari version 0.16.2 or later, where file permissions have been adjusted to enhance security. If upgrading is not feasible immediately, review and adjust the file permissions for particular Ruby files in Kaminari to ensure they are only accessible by authorized user.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-276
References: https://github.com/kaminari/kaminari/security/advisories/GHSA-7r3j-qmr4-jfpj; https://github.com/kaminari/kaminari/security/advisories/GHSA-7r3j-qmr4-jfpj
CVE: CVE-2024-35219
Published: 2024-05-27
Description: OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the `outputFolder` option. The issue was fixed in version 7.6.0 by removing the usage of the `outputFolder` option. No known workarounds are available.
CVSS Score: 8.3 (HIGH)
CWE: CWE-22
References: https://github.com/OpenAPITools/openapi-generator/commit/edbb021aadae47dcfe690313ce5119faf77f800d; https://github.com/OpenAPITools/openapi-generator/pull/18652; https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-g3hr-p86p-593h
CVE: CVE-2022-4969
Published: 2024-05-27
Description: A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function count_rows of the file rockhopper/src/ragged_array.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local access is required to approach this attack. Upgrading to version 0.2.0 is able to address this issue. The name of the patch is 1a15fad5e06ae693eb9b8908363d2c8ef455104e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-266312.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://github.com/bwoodsend/rockhopper/commit/1a15fad5e06ae693eb9b8908363d2c8ef455104e; https://github.com/bwoodsend/rockhopper/releases/tag/v0.2.0; https://vuldb.com/?ctiid.266312
CVE: CVE-2024-35229
Published: 2024-05-27
Description: ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to version 1.3.10, there is a very specific pattern `f(a(),b()); check_if_a_executed_last()` in Yul that exposes a bug in evaluation order of Yul function arguments. This vulnerability has been fixed in version 1.3.10. As a workaround, update and redeploy affected contracts.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-696
References: https://github.com/matter-labs/era-compiler-solidity/commit/46ce047b[PII_REDACTED]9b9f67534207d8154eab79; https://github.com/matter-labs/era-compiler-solidity/security/advisories/GHSA-jf9w-7f5g-j95p; https://github.com/matter-labs/era-compiler-solidity/commit/46ce047b[PII_REDACTED]9b9f67534207d8154eab79
CVE: CVE-2024-35231
Published: 2024-05-27
Description: rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data `profiler_runs` was not constrained to any limitation. This would lead to allocating resources on the server side with no limitation and a potential denial of service by remotely user-controlled data. Version 2.5.0 contains a patch for the issue.
CVSS Score: 8.6 (HIGH)
CWE: CWE-770
References: https://github.com/rack/rack-contrib/commit/0eec2a[PII_REDACTED]c6742549e65a94a4c24fe6f7; https://github.com/rack/rack-contrib/security/advisories/GHSA-8c8q-2xw3-j869; https://github.com/rack/rack-contrib/commit/0eec2a[PII_REDACTED]c6742549e65a94a4c24fe6f7
CVE: CVE-2024-35236
Published: 2024-05-27
Description: Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.10.0, opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Attacking a user with high privileges (upload, creation of libraries) can lead to remote code execution (RCE) in the worst case. This was tested on version 2.9.0 on Windows, but an arbitrary file write is powerful enough as is and should easily lead to RCE on Linux, too. Version 2.10.0 contains a patch for the vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/advplyr/audiobookshelf/assets/36849099/46f6dfe0-9860-4ec0-a987-b3a553f7e45d; https://github.com/advplyr/audiobookshelf/blob/04ed4810fdfcafc2e82db536edc5870e3f937d00/client/components/readers/EpubReader.vue#L319; https://github.com/advplyr/audiobookshelf/commit/ce7f891b9b2cb57c6644aaf96f89a8bda6307664
CVE: CVE-2024-35237
Published: 2024-05-27
Description: MIT IdentiBot is an open-source Discord bot written in Node.js that verifies individuals' affiliations with MIT, grants them roles in a Discord server, and stores information about them in a database backend. A vulnerability that exists prior to commit 48e3e5e7ead6777fa75d57c7711c8e55b501c24e impacts all users who have performed verification with an instance of MIT IdentiBot that meets the following conditions: The instance of IdentiBot is tied to a "public" Discord application—i.e., users other than the API access registrant can add it to servers; *and* the instance has not yet been patched. In affected versions, IdentiBot does not check that a server is authorized before allowing members to execute slash and user commands in that server. As a result, any user can join IdentiBot to their server and then use commands (e.g., `/kerbid`) to reveal the full name and other information about a Discord user who has verified their affiliation with MIT using IdentiBot. The latest version of MIT IdentiBot contains a patch for this vulnerability (implemented in commit 48e3e5e7ead6777fa75d57c7711c8e55b501c24e). There is no way to prevent exploitation of the vulnerability without the patch. To prevent exploitation of the vulnerability, all vulnerable instances of IdentiBot should be taken offline until they have been updated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/ZelnickB/mit-identibot/commit/48e3e5e7ead6777fa75d57c7711c8e55b501c24e; https://github.com/ZelnickB/mit-identibot/security/advisories/GHSA-h8r9-7r8x-78v6; https://github.com/ZelnickB/mit-identibot/commit/48e3e5e7ead6777fa75d57c7711c8e55b501c24e
CVE: CVE-2024-27310
Published: 2024-05-27
Description: Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-90
References: https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-27310.html; https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-27310.html
CVE: CVE-2024-35238
Published: 2024-05-27
Description: Minder by Stacklok is an open source software supply chain security platform. Minder prior to version 0.0.51 is vulnerable to a denial-of-service (DoS) attack which could allow an attacker to crash the Minder server and deny other users access to it. The root cause of the vulnerability is that Minders sigstore verifier reads an untrusted response entirely into memory without enforcing a limit on the response body. An attacker can exploit this by making Minder make a request to an attacker-controlled endpoint which returns a response with a large body which will crash the Minder server. Specifically, the point of failure is where Minder parses the response from the GitHub attestations endpoint in `getAttestationReply`. Here, Minder makes a request to the `orgs/$owner/attestations/$checksumref` GitHub endpoint (line 285) and then parses the response into the `AttestationReply` (line 295). The way Minder parses the response on line 295 makes it prone to DoS if the response is large enough. Essentially, the response needs to be larger than the machine has available memory.  Version 0.0.51 contains a patch for this issue.

The content that is hosted at the `orgs/$owner/attestations/$checksumref` GitHub attestation endpoint is controlled by users including unauthenticated users to Minders threat model. However, a user will need to configure their own Minder settings to cause Minder to make Minder send a request to fetch the attestations. The user would need to know of a package whose attestations were configured in such a way that they would return a large response when fetching them. As such, the steps needed to carry out this attack would look as such:

1. The attacker adds a package to ghcr.io with attestations that can be fetched via the `orgs/$owner/attestations/$checksumref` GitHub endpoint.
2. The attacker registers on Minder and makes Minder fetch the attestations.
3. Minder fetches attestations and crashes thereby being denied of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/stacklok/minder/blob/daccbc12e364e2d407d56b87a13f7bb24cbdb074/internal/verifier/sigstore/container/container.go#L271-L300; https://github.com/stacklok/minder/commit/fe321d345b4f738de6a06b13207addc72b59f892; https://github.com/stacklok/minder/security/advisories/GHSA-8fmj-33gw-g7pw
CVE: CVE-2024-36036
Published: 2024-05-27
Description: Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-862
References: https://www.manageengine.com/products/active-directory-audit/cve-2024-36036.html; https://www.manageengine.com/products/active-directory-audit/cve-2024-36036.html
CVE: CVE-2024-36037
Published: 2024-05-27
Description: Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.manageengine.com/products/active-directory-audit/cve-2024-36037.html; https://www.manageengine.com/products/active-directory-audit/cve-2024-36037.html
CVE: CVE-2024-36105
Published: 2024-05-27
Description: dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Prior to versions 1.6.15, 1.7.15, and 1.8.1, Binding to `INADDR_ANY (0.0.0.0)` or `IN6ADDR_ANY (::)` exposes an application on all network interfaces, increasing the risk of unauthorized access. As stated in the Python docs, a special form for address is accepted instead of a host address: `''` represents `INADDR_ANY`, equivalent to `"0.0.0.0"`. On systems with IPv6, '' represents `IN6ADDR_ANY`, which is equivalent to `"::"`. A user who serves docs on an unsecured public network, may unknowingly be hosting an unsecured (http) web site for any remote user/system to access on the same network. The issue has has been mitigated in dbt-core v1.6.15, dbt-core v1.7.15, and dbt-core v1.8.1 by binding to localhost explicitly by default in `dbt docs serve`.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1327
References: https://cwe.mitre.org/data/definitions/1327.html; https://docs.python.org/3/library/socket.html#socket-families; https://docs.securesauce.dev/rules/PY030
CVE: CVE-2024-35181
Published: 2024-05-27
Description: Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injection stacked queries payload, and the ATTACH DATABASE command. Additionally, attackers may be able to access and modify any data stored in the database, like performance profiles (which may contain session cookies), Meshery application data, or any Kubernetes configuration added to the system. The Meshery project exposes the function `GetMeshSyncResourcesKinds` at the API URL `/api/system/meshsync/resources/kinds`. The order query parameter is directly used to build a SQL query in `meshync_handler.go`. Version 0.7.22 fixes this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/meshsync_handler.go#L187; https://github.com/meshery/meshery/commit/8e995ce21af02d32ef61689c1e1748a745917f13; https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c
CVE: CVE-2024-35182
Published: 2024-05-27
Description: Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. A SQL injection vulnerability in Meshery prior to version 0.7.22 may lead to arbitrary file write by using a SQL injection stacked queries payload, and the ATTACH DATABASE command. Additionally, attackers may be able to access and modify any data stored in the database, like performance profiles (which may contain session cookies), Meshery application data, or any Kubernetes configuration added to the system. The Meshery project exposes the function `GetAllEvents` at the API URL `/api/v2/events`. The sort query parameter read in `events_streamer.go` is directly used to build a SQL query in `events_persister.go`. Version 0.7.22 fixes this issue by using the `SanitizeOrderInput` function.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/events_streamer.go#L52; https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/models/events_persister.go#L47; https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c
CVE: CVE-2024-29415
Published: 2024-05-27
Description: The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1,[PII_REDACTED]7, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-941
References: https://github.com/indutny/node-ip/issues/150; https://github.com/indutny/node-ip/pull/143; https://github.com/indutny/node-ip/pull/144
CVE: CVE-2024-34923
Published: 2024-05-27
Description: In Avocent DSR2030 Appliance firmware 03.04.00.07 before 03.07.01.23, and SVIP1020 Appliance firmware 01.06.00.03 before 01.07.00.00, there is reflected cross-site scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Ka1ne1/ka1ne1.github.io/blob/main/avocent_xss.html; https://ka1ne1.github.io/avocent_xss.html; https://github.com/Ka1ne1/ka1ne1.github.io/blob/main/avocent_xss.html
CVE: CVE-2024-36426
Published: 2024-05-27
Description: In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://community.targit.com/hc/en-us/articles/[PII_REDACTED]028-Change-Log-On-prem; https://community.targit.com/hc/en-us/articles/[PII_REDACTED]156-Vulnerabilities; https://github.com/DMCERTCE/DecisionSuite_Token_in_Url
CVE: CVE-2024-36428
Published: 2024-05-27
Description: OrangeHRM 3.3.3 allows admin/viewProjects sortOrder SQL injection.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/4rdr/proofs/blob/main/info/OrangeHRM_3.3.3_SQLi_via_sortOrder.md; https://sourceforge.net/projects/orangehrm/files/stable/3.3.3/; https://github.com/4rdr/proofs/blob/main/info/OrangeHRM_3.3.3_SQLi_via_sortOrder.md
CVE: CVE-2024-28880
Published: 2024-05-28
Description: Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN97751842/; https://www.e-s-mind.com/2024-02-20/; https://jvn.jp/en/jp/JVN97751842/
CVE: CVE-2024-29078
Published: 2024-05-28
Description: Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://jvn.jp/en/jp/JVN97751842/; https://www.e-s-mind.com/2024-02-20/; https://jvn.jp/en/jp/JVN97751842/
CVE: CVE-2024-28886
Published: 2024-05-28
Description: OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.
CVSS Score: 8.4 (HIGH)
CWE: CWE-94
References: https://jvn.jp/en/jp/JVN71404925/; https://utau2008.xrea.jp/; https://jvn.jp/en/jp/JVN71404925/
CVE: CVE-2024-32944
Published: 2024-05-28
Description: Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip file) to UTAU, an arbitrary file may be placed.
CVSS Score: 3.3 (LOW)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN71404925/; https://utau2008.xrea.jp/; https://jvn.jp/en/jp/JVN71404925/
CVE: CVE-2022-48681
Published: 2024-05-28
Description: Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119, CWE-120
References: https://https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-samovishss-28e21e39-en; https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-samovishss-28e21e39-cn; https://https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-samovishss-28e21e39-en
CVE: CVE-2023-52547
Published: 2024-05-28
Description: Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-130, CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iholpiiahpp-0ab7d6db-en; https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iholpiiahpp-0ab7d6db-en