Lucene search
MitreCVE-2008-3894HistorySep 03, 2008 - 2:12 p.m.
CVE-2008-3894
2008-09-0314:12:00
CWE-200
mitre
web.nvd.nist.gov
22
ibm
lenovo
firmware
vulnerability
bios
pre-boot authentication
password
security
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
IBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Affected configurations
Node
ibmlenovo_7cetb5wwMatch2.05
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | lenovo_7cetb5ww | 2.05 | cpe:2.3:h:ibm:lenovo_7cetb5ww:2.05:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2008-09-03 14:12:00
cvelist
cvelist
CVE-2008-3894
2008-09-03 14:00:00
nvd
nvd
CVE-2008-3894
2008-09-03 14:12:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2008-3894