3 ms·
> may allow an attacker with local access and elevated privileges to execute arbitrary code What are "elevated privileges"? If I lose my laptop and it's locke
by version_five 4y ago
> may allow an attacker with local access and elevated privileges to execute arbitrary code
What are "elevated privileges"? If I lose my laptop and it's locked, can someone execute arbitrary code with this?
- cmeacham98 4y agoNo, the exploit is against the BIOS. It involves an attacker with escalated privileges in the OS using this exploit to further escalate to ACE in the BIOS. That said, if you lose your laptop and it is not encrypted you can safely assume the thief has full access, locked or not.
- nyanpasu64 4y agoDoes this allow executing code to flash unsigned customized BIOSes without disassembling the laptop to flash the BIOS chips through hardware (which works in the absence of Intel Boot Guard)?
- cmeacham98 4y agoI'm not an expert (so take this with a grain of salt), but by my understanding that should be theoretically possible. However, I'm not aware of any successful attempts.