1. Home
  2. CVE Database
  3. CVE-2015-0949
HIGH · 7.8

CVE-2015-0949

The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that...

Vulnerability Description

The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Boot protection mechanism and gain privileges by leveraging write access to physical memory.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DellLatitude E6430 Firmwarea09
DellLatitude E6430-
HpElitebook 850 G1 Firmware01.09
HpElitebook 850 G1-

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2015-0949?

CVE-2015-0949 is a vulnerability with a CVSS score of 7.8 (HIGH). The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that...

How severe is CVE-2015-0949?

CVE-2015-0949 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-0949?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Latitude E6430 Firmware, Dell Latitude E6430, Hp Elitebook 850 G1 Firmware, Hp Elitebook 850 G1.