Unscored severity · published Sep 3, 2008
CVE-2008-3900
Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Intel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bios · Intel
pe94510m.86a.0050.2007.0710.1559 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3900
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3900
securityreason.com
http://securityreason.com/securityalert/4205
securitytracker.com
http://securitytracker.com/id?1020738
www.ivizsecurity.com
http://www.ivizsecurity.com/preboot-patch.html
www.ivizsecurity.com
http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
US Government Resource
http://www.kb.cert.org/vuls/id/604539
www.securityfocus.com
http://www.securityfocus.com/archive/1/495804/100/0/threaded
More from Bios
8.0
CVE-2019-14557
Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to…
7.8
CVE-2020-12360
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access
7.8
CVE-2020-8672
Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially…
7.8
CVE-2020-8739
Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege…
7.8
CVE-2018-3612
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM)