Unscored severity · published Aug 27, 2009
CVE-2008-7096
Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
Bios · Intel
dg33bu; dg33fb; dg33tl; dp35dp; dq35jo; dq35mp; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7096
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7096
invisiblethingslab.com
http://invisiblethingslab.com/bh08/part2-full.pdf
osvdb.org
http://osvdb.org/49901
Patch
http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr
theinvisiblethings.blogspot.com
http://theinvisiblethings.blogspot.com/2008/08/attacking-xen-domu-vs-dom0.html
theinvisiblethings.blogspot.com
http://theinvisiblethings.blogspot.com/2008/08/intel-patches-q35-bug.html
www.securityfocus.com
http://www.securityfocus.com/bid/30823
More from Bios
8.0
CVE-2019-14557
Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to…
7.8
CVE-2020-12360
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access
7.8
CVE-2020-8672
Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially…
7.8
CVE-2020-8739
Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege…
7.8
CVE-2018-3612
Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode (SMM)