Lucene search
HistoryDec 11, 2005 - 9:03 p.m.
CVE-2005-4175
insecure bios
v190
bios password
vulnerability
keyboard buffer
local administrators
physical memory
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
32.3%
Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
Affected configurations
Node
insydeinsyde_biosMatchv190
| CPE | Name | Operator | Version |
|---|---|---|---|
| insyde:insyde_bios | insyde insyde bios | eq | v190 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
32.3%
Related for CVE-2005-4175