4.6med

CVE-2002-2059

BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passw…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 39%
Public exploits
0
none known

Summary

BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key.

Exploit prediction (EPSS)

0.45% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • archives.neohapsis.com /archives/bugtraq/2002-05/0017.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/8998.php · vdb-entry, x_refsource_XF, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-04/0356.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/4610 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.