CVE-2026-33197:详情

CVE-2026-33197

2026-09-08
15h18 +00:00
A03-Injection
2026-09-08
16h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-184 Incomplete List of Disallowed Inputs
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.

参考资料