PT-2017-18110

CVE-2017-8083

·

Published

2017-06-06

·

Updated

2019-10-03

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21
Description The issue concerns the lack of the CloseMnf protection mechanism for write protection of flash memory regions in certain devices. This allows local users with administrative privileges to install a firmware rootkit.
Recommendations For CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21, update the BIOS to a version released after 2017-05-21 to enable the CloseMnf protection mechanism and prevent the installation of firmware rootkits.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2017-8083
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com