New answers tagged

0

If you are asking whether UEFI compromises a PC physical access, or if it creates any kind of potentially dangerous logs requires further clarification. Every PC with Windows 8 or later uses UEFI as part of its licensing requirement. UEFI Secure Boot in Win10 validates programs before execution.If you have to dual boot Win10 and Linux then linux require a ...


1

I can't remember the last time I worked on a system where a CMOS battery pull reset the password. Of course, password reset jumpers or manufacturer override codes are features, and you can expect UEFI to have all the features BIOS had and then some. Remember, though, that BIOS passwords aren't that powerful. They protect against someone with physical access ...


3

In layman's term, as requested, I think this vulnerabiliy can be simply boiled down to particular case of privilege escalation attack. It follows the same way, and pursue the same goal (and such attacks against SMM are not new: two other occurrences were presented at the Black Hat conference in 2008 and 2015). How it works: it works by injecting arbitrary ...


6

what this allows an attacker to do? It allows an attacker to execute arbitrary code in System Management Mode (SMM), a highly privileged execution mode of x86 processors. This mode is transparent to the Operating System (OS) and it is more privileged than any other mode. If an attacker can execute code in SMM, it basically owns the platform/computer (more ...



Top 50 recent answers are included