CVE-2019-18579

HIGH Year: 2019
CVSS v3 Score
7.6
High
CVSS v2 Score
7.2
High
Weakness Type
CWE-16
View all →

Vulnerability Description

Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's system can obtain read or write access to main memory via a DMA attack during platform boot.

Related Vulnerabilities

CVE-2016-10446

HIGH
CVSS:7.5(High)

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 820, SD 820A, and SD 8...

CWE-162016

CVE-2019-15993

HIGH
CVSS:7.5(High)

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lac...

CWE-162019

CVE-2019-16760

HIGH
CVSS:7.5(High)

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key. Usage of the `package` key to rename dependencies in `Cargo.toml` is ignore...

CWE-162019

CVE-2019-1742

HIGH
CVSS:7.5(High)

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access contro...

CWE-162019

CVE-2019-19097

HIGH
CVSS:7.5(High)

ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connection...

CWE-162019

CVE-2020-2041

HIGH
CVSS:7.5(High)

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service...

CWE-162020