VulnerabilityModified
CVE-2008-7020
McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical…
LOW 2.1EPSS 0.20%
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- mcafee/safeboot device encryption
- Source
- cve@mitre.org
References
- http://seclists.org/fulldisclosure/2008/Sep/0378.html
- http://secunia.com/advisories/31903Vendor Advisory
- http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
- http://www.ivizsecurity.com/security-advisory-iviz-sr-08010.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45275
- http://seclists.org/fulldisclosure/2008/Sep/0378.html
- http://secunia.com/advisories/31903Vendor Advisory
- http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf
- http://www.ivizsecurity.com/security-advisory-iviz-sr-08010.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45275
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.