3 ms·
there are 3 paths. 1. placing logo into ESP (EFI System Partition) via admin privileges 2. Bios update tool 3. When there is no expected way to customize the
by instagib 3y ago
there are 3 paths.
1. placing logo into ESP (EFI System Partition) via admin privileges
2. Bios update tool
3. When there is no expected way to customize the logo, it is still possible via physical attack vector: just with an SPI flash programmer if a logo is not covered with any hardware-based Verified Boot technology like Intel Boot Guard or AMD Hardware-Validated Boot
“As we can see in the following table, we detected parsers vulnerable to LogoFAIL in hundreds of devices sold by Lenovo, Supermicro, MSI, HP, Acer, Dell, Fujitsu, Samsung and Intel. “
https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/ https://binarly.io/posts/finding_logofail_the_dangers_of_ima...