BIOS vulnerability DELL and Apple systems-vulnerability warning-the black bar safety net

! Since the BIOS from sleep mode after Wake-Up due to failure to correctly set write-protected, the attacker may be brush malicious BIOS image, the vulnerability number CVE-2 0 1 5-2 8 9 0, the impact of a large number of DELL systems. Vulnerability details According to the researchers Cornwell,...

CVE-2015-2890

CVE-2015-2890 affects Dell Latitude, OptiPlex, Precision Mobile Workstation and Precision Workstation CS devices with model-dependent firmware before A21. The root cause is failure to enforce BIOS_CNTL locking protection when resuming from sleep, allowing a local attacker with console access to p...