CVE-2015-2890 in BIOSinfo

Summary

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

04/03/2015

Disclosure

07/31/2015

Entries

1: VDB-76846

CPE

ready

CVSS

6.9

EPSS

0.00316

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!