2 matches found
CVE-2017-9457: Improper Input Validation
Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS...
7.2CVSS5.8AI score0.00826EPSS
SaveExploits0References2
PT-2017-18933
Name of the Vulnerable Software and Affected Versions Intense PC Phoenix SecureCore UEFI firmware affected versions not specified Description The issue concerns the lack of capsule signature validation in the UEFI firmware before upgrading the system firmware. This absence of validation enables a...
7.2CVSS0.00826EPSS
SaveExploits0References5
20