Thinkpad UEFI zeroday dumped on Github

Baserk · Jul 2, 2016

Lenovo wasn't informed so no patch yet. Fysical access is required so sky is not falling.

Link removed. Keep in mind, malware links are not welcome here. Ron

BoerenkoolMetWorst · Jul 2, 2016

Not limited to Lenovo:

At this point, Lenovo knows that vulnerable SMM code was provided to Lenovo by at least one of our Independent BIOS Vendors (IBVs). Independent BIOS vendors (IBVs) are software development firms that specialize in developing the customized BIOS firmware that is loaded into the PCs of original equipment manufacturers, including Lenovo. Following industry standard practice, IBVs start with the common code base created by chip vendors, such as Intel or AMD, and add additional layers of code that are specifically designed to work with a particular computer. Lenovo currently works with the industry’s three largest IBVs.

The package of code with the SMM vulnerability was developed on top of a common code base provided to the IBV by Intel. Importantly, because Lenovo did not develop the vulnerable SMM code and is still in the process of determining the identity of the original author, it does not know its originally intended purpose. But, as part of the ongoing investigation, Lenovo is engaging all of its IBVs as well as Intel to identify or rule out any additional instances of the vulnerability's presence in the BIOS provided to Lenovo by other IBVs, as well as the original purpose of the vulnerable code.
Click to expand...

https://support.lenovo.com/nl/en/solutions/LEN-8324

Baserk · Jul 2, 2016

Sorry guys. Didn't mean any harm.
I thought, anyone who can read the code, knows how&where to find it anyway. But I understand.

Baserk · Jul 6, 2016

Same vulnerable UEFI code also found on hardware from other big names; f.i. on an HP laptop and several Gigabyte motherboards.
https://mobile.twitter.com/al3xtjames/status/750183816266940417?p=v

Log in or Sign up

Thinkpad UEFI zeroday dumped on Github

Baserk Registered Member

BoerenkoolMetWorst Registered Member

Baserk Registered Member

Baserk Registered Member

Log in or Sign up

Thinkpad UEFI zeroday dumped on Github

Baserk Registered Member

BoerenkoolMetWorst Registered Member

Baserk Registered Member

Baserk Registered Member

Useful Searches