NetSight
medium6.7

CVE-2017-8083

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions…

Impact

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges.

Affected products

VendorProductAffected versions
CompulabIntense Pc Firmware
through cr_2.2.0.400.2
CompulabMintbox 2 Firmware
through cr_2.2.0.400.2

Weakness classification

References