CVE-2017-8083 CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a f...
MediumCVSS 6.7
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| compulab intense pc firmware | <= cr_2.2.0.400.2 | No fix listed |
| compulab mintbox 2 firmware | <= cr_2.2.0.400.2 | No fix listed |
References
- seclists.org mailing-list third-party-advisory
- watchmysys.com third-party-advisory