Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-18579

Опубликовано: 16 дек. 2019
Источник: nvd
CVSS3: 7.6
CVSS3: 6.8
CVSS2: 7.2
EPSS Низкий

Описание

Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's system can obtain read or write access to main memory via a DMA attack during platform boot.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dell:xps_7390_firmware:*:*:*:*:*:*:*:*
Версия до 1.1.3 (исключая)
cpe:2.3:h:dell:xps_7390:-:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00227
Низкий

7.6 High

CVSS3

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-16
NVD-CWE-Other

Связанные уязвимости

github
больше 3 лет назад

Settings for the Dell XPS 13 2-in-1 (7390) BIOS versions prior to 1.1.3 contain a configuration vulnerability. The BIOS configuration for the "Enable Thunderbolt (and PCIe behind TBT) pre-boot modules" setting is enabled by default. A local unauthenticated attacker with physical access to a user's system can obtain read or write access to main memory via a DMA attack during platform boot.

EPSS

Процентиль: 45%
0.00227
Низкий

7.6 High

CVSS3

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-16
NVD-CWE-Other