3 ms·
Worth noting this important caveat mentioned in the article: > "The tool described above is able to update the system’s firmware only if the SPI flash memory p
by miles 8y ago
Worth noting this important caveat mentioned in the article:
> "The tool described above is able to update the system’s firmware only if the SPI flash memory protections are vulnerable or misconfigured. Thus, you should make sure that you are using the latest available UEFI/BIOS available for your motherboard. Also, as the exploited vulnerability affects only older chipsets, make sure that critical systems have modern chipsets with the Platform Controller Hub (introduced with Intel Series 5 chipsets in 2008)."
- Scoundreller 8y agoIs it a vulnerability in the SPI chip itself, or is the master allowing writes that it shouldn’t ? Does the SPI chip have a write protect line? Or could it be subbed with one that does?
- jlgaddis 8y agoFWIW, some BIOSes have a setting to disable "remote" firmware updates -- although I certainly cannot speak for how reliable that is (and, judging by past experiences, it isn't very reliable at all).