New answers tagged

1

Quoting directly from the IME firwmare update notes, if the attacker does not have physical access to the plaform to do a firmware flash, then they cannot do anything if the recommended flash descriptor write protections have been enabled. If they haven't, then the attackers needs ring 0 access to the kernel, where an attacker can exploit the ...


0

why do you have to match CVSS score of an attack to the CVEs? The CVSS score for a particular CVE is calculated in generically not keeping any specific application in scope. But if you are calculating CVSS score for your application, then you should consider all the points which are related to that application. For example, in NVD database for a CVE, the ...


Top 50 recent answers are included