PT-2018-7184 · Unknown · Consumer Notebooks

Publicado 2018-10-03 · Atualizado 2019-10-03 · CVE-2017-2751

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Consumer notebooks with firmware F.22

Description: A BIOS password extraction issue has been reported, where the BIOS password was stored in CMOS in a way that allowed it to be extracted. This issue affects certain consumer notebooks launched in early 2014.

Recommendations: For consumer notebooks with firmware F.22, consider changing the BIOS password to a new, secure one to minimize potential risks. Additionally, restrict physical access to the notebooks to prevent unauthorized extraction of the BIOS password.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-2751

Produtos afetados

Consumer Notebooks

Referências · 3

• https://support.hp.com/us-en/document/c05913581 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2751 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2751 · Nota de Segurança