CVE-2009-5151
MEDIUMAbsolute Computrace Agent - Unauthenticated Code Execution via Inter-Partition Space
Title source: llmDescription
The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.
References (1)
Core 1
Core References
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf
Scores
CVSS v3
6.7
EPSS
0.0050
EPSS Percentile
39.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-284
Status
published
Products (1)
absolute/computrace_agent
70.785
Published
May 11, 2018
Tracked Since
Feb 18, 2026