This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] MSI fixes 1 vulnerability in motherboards
MSI fixes 1 vulnerability affecting motherboards of the Z590, Z490, Z790, B760, B560, B660 and B460 series on the Intel 300, 400, 500, 600, 700 and AMD AM4, AM5 platforms. To fix it, the UEFI must be updated to the latest available version. A reasonable method of detecting compromise is not yet known. If a compromise has already occurred, it can be removed only by an update that does not require the UEFI function (e.g. using a hardware memory programmer) [1][2].
An authenticated local attacker can execute arbitrary code, which may lead to complete takeover of the machine. After the vulnerability is exploited, the attacker's actions remain undetected by antivirus software and the attacker can ensure persistence even after reinstalling the operating system and completely wiping the hard drives [1]. A PoC has been published for the vulnerability and can be found at [3].
CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-36877 at cve.org, NVD
- CWE-123: Write-what-where Condition at cwe.mitre.org
- CWE-94: Improper Control of Generation of Code ('Code Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 9. 8. 2024.
Links
By CESNET, z.s.p.o. Martin Krajči on 14. 8. 2024.