PT-2018-2694 · Intel · Tianocore

Publicado 2018-07-10 · Atualizado 2018-07-10 · CVE-2018-3614

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:L/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tianocore (affected versions not specified)

Description The issue is related to errors in data type conversion in the UEFI interface implementation. It may allow an attacker to disable System Management Mode (SMM) protection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Type Conversion or Cast

Enumeração de Fraquezas

CWE-264

CWE-704

Identificadores relacionados

BDU:2019-01363

CVE-2018-3614

Produtos afetados

Tianocore

Referências · 3

• https://support.hp.com/us-en/document/c06181686 · Nota
• https://bdu.fstec.ru/vul/2019-01363 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00159.html · Nota