Details of VAR-201406-0481

ID

VAR-201406-0481

CVE

CVE-2014-2961

TITLE

Unauthorized modification of UEFI variables in UEFI systems

Trust: 0.8

sources: CERT/CC: VU#758382

DESCRIPTION

Certain firmware implementations may not correctly protect and validate information contained in certain UEFI variables. Exploitation of such vulnerabilities could potentially lead to bypass of security features and/or denial of service for the platform. Multiple products UEFI There is a vulnerability in the firmware. Multiple products UEFI The firmware includes OS of API From UEFI Variables 'Setup' There is a vulnerability that can be tampered with. For more information INTEL-SA-00038 Please confirm. INTEL-SA-00038 https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00038&languageid=en-frOS By a user with administrator rights UEFI May be tampered with. as a result, Secure Boot Security functions such as (DoS) There is a possibility of being attacked. UEFI, the full name of \"Unified Extensible Firmware Interface\", is a standard that describes the type interface in detail. On some systems, the operating system API can be used to override this variable, allowing local attackers to exploit the vulnerability to modify UEFI variables. Attackers with physical access to the computer running the vulnerable firmware can exploit this issue to bypass certain security restrictions and trigger denial-of-service conditions. NOTE: Very limited information is currently available regarding this issue. We will update this BID as more information emerges

Trust: 2.25

sources: CERT/CC: VU#758382 // JVNDB: JVNDB-2014-002801 // CNVD: CNVD-2014-03763 // BID: 67947

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2014-03763

AFFECTED PRODUCTS

vendor:	intel	model:	nuc with intel core i5 processor	scope:	eq	version:	0	Trust: 0.9
vendor:	american megatrends incorporated ami	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	dell computer	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	insyde	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	multiple vendors	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	enhanced protection of uefi variables	scope:	-	version:	-	Trust: 0.6
vendor:	intel	model:	nuc with intel core i3 processor	scope:	eq	version:	0	Trust: 0.6
vendor:	intel	model:	server system r1000sp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system r1000rp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system r1000jp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system r1000gz family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system r1000gl family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system r1000ep family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system r1000bb family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system p4304bt	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system p4000sc family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system p4000rp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system p4000ip family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system p4000cp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system h2000wp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system h2000lp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server system h2000jf family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s5520ur	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s5520hct	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s5520hc	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s5500wb	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s5500hcv	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s5500bc	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s4600lt family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s4600lh family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s3420gp	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600wp	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600jf	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600ip family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600gz	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600gl	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600cp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2600co family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2400sc family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2400lp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2400gp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2400ep family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s2400bb	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s1600jp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s1400sp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s1400fp family	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s1200rp	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s1200kp	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	server board s1200bt	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	quark soc transportation reference design	scope:	eq	version:	x10001.0.1	Trust: 0.3
vendor:	intel	model:	quark soc industrial/energy reference design	scope:	eq	version:	x10001.0.1	Trust: 0.3
vendor:	intel	model:	nuc with intel celeron processor	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	nuc with intel atom processor	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	galileo board generation	scope:	eq	version:	21.0.1	Trust: 0.3
vendor:	intel	model:	galileo board	scope:	eq	version:	1.0.1	Trust: 0.3

sources: CERT/CC: VU#758382 // CNVD: CNVD-2014-03763 // BID: 67947 // JVNDB: JVNDB-2014-002801

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2014-2961
value:	MEDIUM
Trust: 0.8
IPA:	JVNDB-2014-002801
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2014-03763
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201406-740
value:	MEDIUM
Trust: 0.6

NVD:	CVE-2014-2961
severity:	MEDIUM
baseScore:	6.0
vectorString:	NONE
accessVector:	LOCAL
accessComplexity:	HIGH
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	1.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
IPA:	JVNDB-2014-002801
severity:	MEDIUM
baseScore:	6.0
vectorString:	AV:L/AC:H/AU:S/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	HIGH
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2014-03763
severity:	MEDIUM
baseScore:	6.0
vectorString:	AV:L/AC:H/AU:S/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	HIGH
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	1.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CERT/CC: VU#758382 // CNVD: CNVD-2014-03763 // JVNDB: JVNDB-2014-002801 // CNNVD: CNNVD-201406-740

THREAT TYPE

local

Trust: 0.9

sources: BID: 67947 // CNNVD: CNNVD-201406-740

TYPE

Design Error

Trust: 0.3

sources: BID: 67947

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-002801

EXPLOIT AVAILABILITY

sources: CERT/CC: VU#758382

PATCH

title:

Enhanced Protection of UEFI Variables

url:

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00038&languageid=en-fr

Trust: 0.8

sources: JVNDB: JVNDB-2014-002801

EXTERNAL IDS

db:	CERT/CC	id:	VU#758382	Trust: 2.8
db:	NVD	id:	CVE-2014-2961	Trust: 2.3
db:	JVN	id:	JVNVU94501306	Trust: 1.4
db:	BID	id:	67947	Trust: 0.9
db:	JVNDB	id:	JVNDB-2014-002801	Trust: 0.8
db:	CNVD	id:	CNVD-2014-03763	Trust: 0.6
db:	CNNVD	id:	CNNVD-201406-740	Trust: 0.6

sources: CERT/CC: VU#758382 // CNVD: CNVD-2014-03763 // BID: 67947 // JVNDB: JVNDB-2014-002801 // CNNVD: CNNVD-201406-740

REFERENCES

url:	http://haxpo.nl/hitb2014ams-kallenberg-cornwell-kovah-butterworth/	Trust: 3.1
url:	http://www.mitre.org/capabilities/cybersecurity/overview/cybersecurity-blog/copernicus-question-your-assumptions-about	Trust: 2.5
url:	http://www.kb.cert.org/vuls/id/758382	Trust: 2.0
url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00038&languageid=en-fr	Trust: 1.7
url:	http://jvn.jp/vu/jvnvu94501306/index.html	Trust: 1.4
url:	https://cansecwest.com/slides/2014/allyourboot_csw14-intel-final.pdf	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2961	Trust: 0.8
url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00038	Trust: 0.6

sources: CERT/CC: VU#758382 // CNVD: CNVD-2014-03763 // BID: 67947 // JVNDB: JVNDB-2014-002801 // CNNVD: CNNVD-201406-740

CREDITS

Corey Kallenberg, Xeno Kovah, John Butterworth, and Sam Cornwell of MITRE Corporation

Trust: 0.3

sources: BID: 67947

SOURCES

db:	CERT/CC	id:	VU#758382
db:	CNVD	id:	CNVD-2014-03763
db:	BID	id:	67947
db:	JVNDB	id:	JVNDB-2014-002801
db:	CNNVD	id:	CNNVD-201406-740

LAST UPDATE DATE

2024-09-09T23:11:46.161000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#758382	date:	2015-02-03T00:00:00
db:	CNVD	id:	CNVD-2014-03763	date:	2014-06-19T00:00:00
db:	BID	id:	67947	date:	2014-06-09T00:00:00
db:	JVNDB	id:	JVNDB-2014-002801	date:	2014-06-11T00:00:00
db:	CNNVD	id:	CNNVD-201406-740	date:	2015-09-17T00:00:00

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#758382	date:	2014-06-09T00:00:00
db:	CNVD	id:	CNVD-2014-03763	date:	2014-06-19T00:00:00
db:	BID	id:	67947	date:	2014-06-09T00:00:00
db:	JVNDB	id:	JVNDB-2014-002801	date:	2014-06-11T00:00:00
db:	CNNVD	id:	CNNVD-201406-740	date:	2014-06-11T00:00:00