Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-4176. PoCs published by Endrazine.
AI-analyzed exploit summary This exploit code reads the BIOS keyboard buffer to extract preboot authentication passwords stored in memory. It writes the dumped password to a file, leveraging direct memory access to the BIOS buffer region.
Description
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
Exploits (2)
This exploit code reads the BIOS keyboard buffer to extract preboot authentication passwords stored in memory. It writes the dumped password to a file, leveraging direct memory access to the BIOS buffer region.
This exploit reads the BIOS keyboard buffer at a fixed memory address (0x041e) to extract preboot authentication passwords left in memory by vulnerable software. It also includes functions to clear or modify the buffer, demonstrating the vulnerability's impact.