Design/Logic Flaw

2017-06-0614:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges.

CPENameOperatorVersion
intense_pc_firmwareeq<= cr-2.2.0.400.2
mintbox_2_firmwareeq<= cr-2.2.0.400.2

CPE	Name	Operator	Version
	intense_pc_firmware	eq	<= cr-2.2.0.400.2
	mintbox_2_firmware	eq	<= cr-2.2.0.400.2

References

seclists.org/fulldisclosure/2017/Jun/6

watchmysys.com/blog/2017/06/cve-2017-8083-compulab-intensepc-lacks-bios-wp/