Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
Intel Security

Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware (bleepingcomputer.com) 46

Catalin Cimpanu, writing for BleepingComputer: Intel has addressed a vulnerability in the configuration of several CPU series that allow an attacker to alter the behavior of the chip's SPI Flash memory -- a mandatory component used during the boot-up process [1, 2, 3]. According to Lenovo, who recently deployed the Intel fixes, "the configuration of the system firmware device (SPI flash) could allow an attacker to block BIOS/UEFI updates, or to selectively erase or corrupt portions of the firmware." Lenovo engineers say "this would most likely result in a visible malfunction, but could in rare circumstances result in arbitrary code execution."

Intel SPI Flash Flaw Lets Attackers Alter or Delete BIOS/UEFI Firmware

Comments Filter:

"I'm not afraid of dying, I just don't want to be there when it happens." -- Woody Allen

Working...