PT-2021-17190
CVE-2021-26943
·
تاريخ النشر
2021-03-30
·
تاريخ التحديث
2021-04-07
الوصف من
CVSS 3.1
8.2
عاليةالمقاييسAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
ASUS UX360CA BIOS versions through 303
Description:
The issue allows an attacker with ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM.
Recommendations:
For ASUS UX360CA BIOS versions through 303, update to a version later than 303 to resolve the issue.
As a temporary workaround, consider restricting access to ring 0 privilege to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾