Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmwg-7c3h-jmrr

Опубликовано: 23 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

A potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

EPSS

Процентиль: 9%
0.00032
Низкий

7.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.7
nvd
почти 4 года назад

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

CVSS3: 7.8
fstec
почти 4 года назад

Уязвимость обработчика SmmOEMInt15 SMI системы BIOS микропрограммного обеспечения ноутбуков ThinkPad, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями

EPSS

Процентиль: 9%
0.00032
Низкий

7.8 High

CVSS3

Дефекты

CWE-20