« Volver al listado

CVE-2015-0949

Estado: ModificadaAlta (7.8)—

The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Boot protection mechanism and gain privileges by leveraging write access to physical memory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Dell — Latitude E6430 FirmwareHP — Elitebook 850 G1 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0949",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "Latitude E6430",
          "versions": [
            {
              "status": "affected",
              "version": "BIOS Revision A09"
            }
          ]
        },
        {
          "vendor": "HP",
          "product": "EliteBook 850 G1",
          "versions": [
            {
              "status": "affected",
              "version": "BIOS revision L71 Ver. 01.09"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-01-30T21:15:14.417",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/631788",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/631788",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Boot protection mechanism and gain privileges by leveraging write access to physical memory."
    },
    {
      "lang": "es",
      "value": "La implementación de System Management Mode (SMM) en Dell Latitude E6430 BIOS Revisión A09, HP EliteBook 850 G1 BIOS revisión L71 Versión 01.09, y posiblemente otras implementaciones de BIOS, no aseguran que las llamadas de función operen en ubicaciones de memoria SMRAM, lo que permite a usuarios locales omitir el mecanismo de protección Secure Boot y alcanzar privilegios mediante el aprovechamiento del acceso de escritura a la memoria física."
    }
  ],
  "lastModified": "2026-06-17T00:21:11.200",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:latitude_e6430_firmware:a09:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F5DAE26-3C97-4E77-8D2D-B6F417093AE2"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:latitude_e6430:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9C8BDA3B-87C6-4F47-B396-CEA8DBBF640F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:elitebook_850_g1_firmware:01.09:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36AE0EEA-3B7B-4343-94B3-EDE8D7CE8B47"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hp:elitebook_850_g1:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "501F84E0-09F8-4D46-921F-411CDB5D6670"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}