Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

guest · Apr 15, 2018

Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware
April 15, 2018
https://www.bleepingcomputer.com/ne...attackers-alter-or-delete-bios-uefi-firmware/

According to Lenovo, who recently deployed the Intel fixes, "the configuration of the system firmware device (SPI flash) could allow an attacker to block BIOS/UEFI updates, or to selectively erase or corrupt portions of the firmware."

Lenovo engineers say "this would most likely result in a visible malfunction, but could in rare circumstances result in arbitrary code execution."

The bug has received a severity score of 7.9 out of 10 on the CVSSv3 scale. Intel said it discovered the issue internally.
"Issue is root-caused, and the mitigation is known and available," the company said in a security advisory. "To Intel’s knowledge, the issue has not been seen externally."
Click to expand...

Log in or Sign up

Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

guest Guest

Log in or Sign up

Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

guest Guest

Useful Searches