PT-2018-4023 · Absolute · Absolute Computrace Agent

Publicado 2018-05-11 · Atualizado 2018-06-14 · CVE-2009-5151

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Absolute Computrace Agent version V70.785

Description The issue allows attackers to execute code on the BIOS by exploiting the stub component of the Absolute Computrace Agent, which executes code from a disk's inter-partition space without requiring a digital signature. This enables a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.

Recommendations For Absolute Computrace Agent version V70.785, consider disabling the stub component until a patch is available to prevent execution of unsigned code from the disk's inter-partition space.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2009-5151

Produtos afetados

Absolute Computrace Agent

Referências · 2

• 🔥 https://coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-5151 · Nota de Segurança