PT-2018-4023 · Absolute · Absolute Computrace Agent

Published 2018-05-11 · Updated 2018-06-14 · CVE-2009-5151

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Absolute Computrace Agent version V70.785

Description The issue allows attackers to execute code on the BIOS by exploiting the stub component of the Absolute Computrace Agent, which executes code from a disk's inter-partition space without requiring a digital signature. This enables a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.

Recommendations For Absolute Computrace Agent version V70.785, consider disabling the stub component until a patch is available to prevent execution of unsigned code from the disk's inter-partition space.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2009-5151

Affected Products

Absolute Computrace Agent

References · 2

• 🔥 https://coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-5151 · Security Note