CVE-2015-6856

HIGH

Dell Pre-Boot Authentication Driver 1.0.1.5 - Unauthenticated Arbitrary Physical Memory Write via IOCTL 0x0022201c

Title source: llm

Description

Dell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call.

References (5)

Core 5

Core References

Exploit x_refsource_misc

https://www.korelogic.com/Resources/Advisories/KL-001-2015-008.txt

Exploit x_refsource_misc

http://packetstormsecurity.com/files/134987/Dell-Authentication-Driver-Uncontrolled-Write.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/537161/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/79643

Exploit mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2015/Dec/81

Scores

CVSS v3 7.8

EPSS 0.0008

EPSS Percentile 22.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-264

Status published

Products (1)

dell/pre-boot_authentication_driver 1.0.1.5

Published Jan 08, 2016

Tracked Since Feb 18, 2026