ByteOS Network

NVD Vulnerability Details :

CVE-2015-0949

Analyzed

Source-cret@cert.org

Published At-30 Jan, 2020 | 21:15

Updated At-06 Feb, 2020 | 15:10

The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Boot protection mechanism and gain privileges by leveraging write access to physical memory.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Dell Inc.

>>latitude_e6430_firmware>>a09

cpe:2.3:o:dell:latitude_e6430_firmware:a09:*:*:*:*:*:*:*

Dell Inc.

>>latitude_e6430>>-

cpe:2.3:h:dell:latitude_e6430:-:*:*:*:*:*:*:*

HP Inc.

>>elitebook_850_g1_firmware>>01.09

cpe:2.3:o:hp:elitebook_850_g1_firmware:01.09:*:*:*:*:*:*:*

HP Inc.

>>elitebook_850_g1>>-

cpe:2.3:h:hp:elitebook_850_g1:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-269	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.kb.cert.org/vuls/id/631788	cret@cert.org	Third Party Advisory US Government Resource

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History