Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

69 records

Priority LOW 27

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00095 Published 2026-10-13 Fixed in AptioV_5.043 CWE-213
Priority LOW 32

AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access.

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.00112 Published 2026-10-13 Fixed in AptioV_5.044 CWE-787
Priority LOW 32

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access.

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.00112 Published 2026-10-13 Fixed in AptioV_5.044 CWE-190
TI-2026-25621 CVE-2026-33197 · GHSA-r768-j77w-2vwm

BDS Module Bypass Secure Boot Advisory

Priority LOW 39

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access.

CVSS 4.0HIGH 8.7 Local High privileges No interaction EPSS 0.00175 Published 2026-09-08 Fixed in AptioV_5.044 CWE-184
TI-2025-36428 CVE-2025-58770 · GHSA-5gw4-7cfm-h82q

TCG2 TPM RT Not Locked Issue

Priority LOW 30

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access.

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00117 Published 2025-12-12 Fixed in AptioV_5.041 CWE-280
TI-2025-24037 CVE-2025-33044 · GHSA-rgvh-2933-hp94

exFat Memory Corruption Issue

Priority LOW 25

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00153 Published 2025-10-14 Fixed in AptioV_5.040 CWE-119
TI-2025-16714 CVE-2025-22833 · GHSA-r8fm-c9h2-4jg9

FixupArray Pointer Validation in NTFS

Priority LOW 22

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing.

CVSS 4.0MEDIUM 4.6 Local Low privileges User interaction EPSS 0.00165 Published 2025-10-14 Fixed in AptioV_5.040 CWE-787
Priority LOW 25

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00153 Published 2025-10-14 Fixed in AptioV_5.040 CWE-787
Priority LOW 25

APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00153 Published 2025-10-14 Fixed in AptioV_5.040 CWE-787
Priority LOW 37

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00159 Published 2025-09-09 Fixed in AptioV_5.040 CWE-123
TI-2025-16711 CVE-2025-22830 · GHSA-x68q-pxpj-5qrp

SmiFlash Race Condition Vulnerability

Priority LOW 33

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access.

CVSS 4.0HIGH 7.3 Local High privileges User interaction EPSS 0.00102 Published 2025-08-12 No fix listed CWE-362
TI-2025-16715 CVE-2025-22834 · GHSA-3vc2-p3hx-6q5q

ThirdPartyVideo SetVariable Vulnerability

Priority LOW 23

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00132 Published 2025-08-12 No fix listed CWE-665
TI-2025-24036 CVE-2025-33043 · GHSA-q358-6958-pqcv

SMM buffer Integrity

Priority LOW 26

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00183 Published 2025-05-29 No fix listed CWE-20
TI-2024-28415 CVE-2024-42446 · GHSA-pgm8-5pfj-3v9h

TOCTOU in SmmWhea

Priority LOW 34

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00135 Published 2025-05-13 No fix listed CWE-367
TI-2024-36204 CVE-2024-54084 · GHSA-4prc-vpwg-w736

SMM Arbitrary Write via TOCTOU Vulnerability

Priority LOW 34

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00116 Published 2025-03-11 No fix listed CWE-367
TI-2024-36205 CVE-2024-54085 · GHSA-vcgc-h73q-2m2p

Redfish Authentication Bypass

Priority CRITICAL 100KEV

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.60747 Published 2025-03-11 Fixed in 12.7, 13.5 CWE-290
Priority LOW 25

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker.

CVSS 4.0MEDIUM 5.7 Local High privileges No interaction EPSS 0.0016 Published 2025-02-11 No fix listed CWE-20
TI-2024-28414 CVE-2024-42444 · GHSA-45gf-27xm-h64q

TOCTOU Race Condition between DMA and SMM

Priority LOW 35

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2025-01-14 No fix listed CWE-367
TI-2024-02152 CVE-2024-2315 · GHSA-xf4p-4gf4-v92p

SMM arbitrary code execution in Overclock

Priority LOW 29

APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00128 Published 2024-11-12 No fix listed CWE-284
TI-2024-22242 CVE-2024-33658 · GHSA-rf57-p454-qrmj

Buffer Overflow Vulnerability In OFBD

Priority LOW 20

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local.

CVSS 4.0MEDIUM 4.4 Local Low privileges User interaction EPSS 0.00188 Published 2024-11-12 No fix listed CWE-119
Priority LOW 23

An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.0015 Published 2024-11-12 No fix listed CWE-494
TI-2024-28413 CVE-2024-42442 · GHSA-jjfc-8563-3h89

Runtime Service Access outside SMRAM

Priority MEDIUM 42

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00811 Published 2024-11-12 No fix listed CWE-119
TI-2024-22241 CVE-2024-33657 · GHSA-8fgq-vqp8-467c

Smm Callout in SmmComputrace Module

Priority LOW 35

This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2024-08-21 No fix listed CWE-20
Load more