CVE-2017-9457

The CVE-2017-9457 issue affects CompuLab Intense PC (Phoenix SecureCore) UEFI firmware. The root cause is missing capsule signature verification during firmware upgrades, enabling an attacker with administrator privileges to flash a modified UEFI BIOS. CNVD-2017-26600 specifies vulnerability in f...

CVE-2017-8083

CVE-2017-8083 affects CompuLab Intense PC and MintBox 2 BIOS prior to 2017-05-21. The BIOS does not apply CloseMnf write-protection to flash memory regions, allowing a local attacker with administrative privileges to install a firmware rootkit. No remediation details are provided in the connected...