Unscored severity · published Dec 11, 2005
CVE-2005-4175
Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Insyde Bios · Insyde
v190 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4175
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4175
www.ivizsecurity.com
http://www.ivizsecurity.com/preboot-patch.html
www.ivizsecurity.com
http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
Third Party Advisory
http://www.kb.cert.org/vuls/id/847537
www.pulltheplug.org
http://www.pulltheplug.org/users/endrazine/Bios.Information.Leakage.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/419610/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/15751