Vulnerability Details

ID: CVE-2002-2059

Last Modified: Sept. 5, 2008

Open in new window

Description

BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key.

CVSS V2

Access Vector: Local

Access Complexity: Low

Authentication: None

Confidentiality Impact: Partial

Integrity Impact: Partial

Availability Impact: Partial

Base Score: 4.6

Exploitability Score: 3.9

Impact Score: 6.4

CVSS V2: AV:L/AC:L/Au:N/C:P/I:P/A:P

Specialize CVSS-Score

CWE-ID

NVD-CWE-Other

Configuration

Condition		Configuration
OR
OR
	cpe:2.3:h:intel:d845bg_motherboard:p04-0023:::::::* Part: h Product: d845bg_motherboard Vendor: intel Version: p04-0023	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845bg_motherboard:p01-0012:::::::* Part: h Product: d845bg_motherboard Vendor: intel Version: p01-0012	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p08-0031:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p08-0031	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845pt_motherboard:p01-0012:::::::* Part: h Product: d845pt_motherboard Vendor: intel Version: p01-0012	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p11-0040:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p11-0040	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p04-0018:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p04-0018	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p06-0024:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p06-0024	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845bg_motherboard:p05-0024:::::::* Part: h Product: d845bg_motherboard Vendor: intel Version: p05-0024	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845pt_motherboard:p04-0023:::::::* Part: h Product: d845pt_motherboard Vendor: intel Version: p04-0023	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p04-0018:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p04-0018	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p05-0022:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p05-0022	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p06-0024:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p06-0024	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p08-0031:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p08-0031	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p09-0035:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p09-0035	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p10-0038:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p10-0038	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p11-0040:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p11-0040	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845bg_motherboard:p03-0021:::::::* Part: h Product: d845bg_motherboard Vendor: intel Version: p03-0021	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p10-0038:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p10-0038	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845wn_motherboard:p07-0029:::::::* Part: h Product: d845wn_motherboard Vendor: intel Version: p07-0029	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845pt_motherboard:p02-0015:::::::* Part: h Product: d845pt_motherboard Vendor: intel Version: p02-0015	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845pt_motherboard:p03-0021:::::::* Part: h Product: d845pt_motherboard Vendor: intel Version: p03-0021	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845bg_motherboard:p02-0015:::::::* Part: h Product: d845bg_motherboard Vendor: intel Version: p02-0015	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p07-0029:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p07-0029	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845hv_motherboard:p09-0035:::::::* Part: h Product: d845hv_motherboard Vendor: intel Version: p09-0035	Alle Schwachstellen für intel
	cpe:2.3:h:intel:d845pt_motherboard:p05-0024:::::::* Part: h Product: d845pt_motherboard Vendor: intel Version: p05-0024	Alle Schwachstellen für intel

Pre-Condition

                    <?xml version="1.0" ?>
<set operator="and">
    <set operator="or">
        <prop key="device" value="cpe:2.3:h:intel:d845bg_motherboard:p04-0023:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845bg_motherboard:p01-0012:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p08-0031:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845pt_motherboard:p01-0012:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p11-0040:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p04-0018:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p06-0024:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845bg_motherboard:p05-0024:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845pt_motherboard:p04-0023:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p04-0018:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p05-0022:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p06-0024:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p08-0031:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p09-0035:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p10-0038:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p11-0040:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845bg_motherboard:p03-0021:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p10-0038:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845wn_motherboard:p07-0029:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845pt_motherboard:p02-0015:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845pt_motherboard:p03-0021:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845bg_motherboard:p02-0015:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p07-0029:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845hv_motherboard:p09-0035:*:*:*:*:*:*:*"/>
        <prop key="device" value="cpe:2.3:h:intel:d845pt_motherboard:p05-0024:*:*:*:*:*:*:*"/>
    </set>
    <prop key="program_influence" value="input"/>
    <prop key="range" value="local"/>
</set>

Post-Condition

                      <?xml version="1.0" ?>
<set operator="and">
    <prop key="target" value="host"/>
    <set operator="or">
        <prop key="program_influence" value="input"/>
        <prop key="program_influence" value="output"/>
        <prop key="program_influence" value="existence"/>
    </set>
    <prop key="data" value="any"/>
    <set operator="or">
        <prop key="data_influence" value="read"/>
        <prop key="data_influence" value="write"/>
        <prop key="data_influence" value="delete"/>
    </set>
    <set operator="or">
        <prop key="range" value="local"/>
        <prop key="range" value="local"/>
    </set>
</set>

HPI-VDB — Database for IT-Attack Analysis