Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

A local privileged attacker can use SMM on some BIOS, in order to
bypass Secure Boot or to flash the firmware.

Impacted products: BIG-IP Hardware, TMOS, Windows (platform) not
comprehensive, Unix (platform) not comprehensive.

Severity: 1/4.

Creation date: 21/04/2016.

DESCRIPTION OF THE VULNERABILITY

The BIOS can use the SMM (System Management Mode) mode.

However, some BIOS implementations allow access outside the SMRAM
memory.

A local privileged attacker can therefore use SMM on some BIOS, in
order to bypass Secure Boot or to flash the firmware.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/BIOS-privilege-escalation-via-SMM-19433