3 ms·
From his article about this >Patch for this vulnerability is currently not available, I decided to do the full disclosure because the main goal of my UEFI seri
by zarriak 10y ago
From his article about this
>Patch for this vulnerability is currently not available, I decided to do the full disclosure because the main goal of my UEFI series articles is to share the knowledge, not to make vendors and their users happy. Also, I don’t have enough resources to check the vulnerability on all of the Lenovo computers, so, if you have ThinkPad — it’s likely vulnerable, in case of other model lines I’d recommend to wait for official advisory from vendor. It’s very unlikely that this vulnerability will be exploited in the wild, for regular customers there are much more chances to be killed with the lightning strike than meet any System Management Mode exploit or malware.
>http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.h...
I would have assumed that it would also have to do with the Lenovo malware they intentionally installed on their computers.
- deleted 10y ago[deleted]