CVE-2020-10278CWE-284

RVD#2561: Unprotected BIOS allows user to boot from live OS image.

Medium · published June 24, 2020

CVSS v3.0
6.1
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00966 · 61.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-06-24T04:55Z
EPSS history
Timeline
  • 24 JUN 04:55Z
    RVD#2561: Unprotected BIOS allows user to boot from live OS image.
    cvelistv5