Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-2890
HistoryAug 01, 2015 - 1:59 a.m.

CVE-2015-2890

2015-08-0101:59:13
[email protected]
web.nvd.nist.gov
18
dell
bios
efi
flash attacks
cve-2015-2890

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.

Affected configurations

NVD
Node
dellbiosRange≤a20
AND
delllatitude_e6420_atg
OR
delllatitude_e6420_xfr
Node
dellbiosRange≤a12
AND
delllatitude_e6220
OR
delllatitude_xt3
Node
dellbiosRange≤a15
AND
delllatitude_e4310
OR
delllatitude_e5410
OR
delllatitude_e5510
OR
delllatitude_e6410_atg
OR
delllatitude_e6510
OR
dellprecision_mobile_m4600
OR
dellprecision_t1600
Node
dellbiosRange≤a18
AND
delllatitude_e6320
OR
delllatitude_e6520
Node
dellbiosRange≤a14
AND
dellprecision_mobile_m4500
OR
dellprecision_mobile_m6600
Node
dellbiosMatcha13
AND
delllatitude_e4310
OR
delllatitude_e5420
OR
delllatitude_e5520
Node
dellbiosRange≤a11
AND
dellprecision_t3600
OR
dellprecision_t5600
OR
dellprecision_t5600_xl
Node
dellbiosRange≤a10
AND
delloptiplex_390
Node
dellbiosRange≤a17
AND
delloptiplex_790
OR
delloptiplex_990
CPENameOperatorVersion
dell:biosdell bioslea20

Related

nvd 2
cvelist 2
cert 1
prion 2
cve 1
nessus 3
securityvulns 3
openvas 1
nvd
nvd
CVE-2015-2890
2015-08-01 01:59:13
CVE-2015-3692
2015-07-03 01:59:46
cvelist
cvelist
CVE-2015-2890
2015-08-01 01:00:00
CVE-2015-3692
2015-07-03 01:00:00
cert
cert
BIOS implementations fail to properly set UEFI write protections after waking from sleep mode
2015-07-30 00:00:00
prion
prion
Code injection
2015-08-01 01:59:00
Design/Logic Flaw
2015-07-03 01:59:00
cve
cve
CVE-2015-3692
2015-07-03 01:59:46
nessus
nessus
Mac OS X Multiple EFI Vulnerabilities (EFI Security Update 2015-001)
2015-07-07 00:00:00
Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)
2015-07-01 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)
2015-07-01 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001
2015-07-05 00:00:00
Apple Mac OS X / EFI multiple security vulnerabilities
2015-07-05 00:00:00
APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005
2015-07-05 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Jul 2015)
2015-07-10 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON
Related for CVE-2015-2890
nvd2cvelist2cert1prion2cve1nessus3securityvulns3openvas1